Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
File:                     8bc82c3e-b012-3867-928a-11ced293313f.roa (raw, json)
Hash identifier:          zu5DAnaqAltgzz8QsSRhLSNDG8iJCIsTKE45+t1oALY=
Subject key identifier:   76:28:D3:9E:60:D7:2A:BB:B8:83:8E:49:DF:C9:C1:D1:82:D2:30:A6
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285848C580ED77A764960693B3CE00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     10753
IP address blocks:        172.98.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:ed:77:a7:64:96:06:93:b3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bf7f498a-2f01-4a26-867b-1e535555dc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:e3:49:92:92:5d:8a:15:e4:41:0b:e9:00:
                    9d:77:b1:f1:40:f4:24:41:2c:f7:2d:f3:3d:28:1b:
                    22:8d:84:4a:8f:ea:5d:00:7e:23:37:0a:93:91:5d:
                    c1:08:57:25:8d:a6:7b:96:d4:17:61:fa:07:b2:fa:
                    5b:51:17:0d:69:33:8e:46:5b:cc:21:ae:b7:82:af:
                    33:da:88:f0:62:7c:b0:87:2b:1d:84:13:e8:b0:b6:
                    98:98:55:a0:35:a8:6c:67:b3:c6:6a:d4:f1:90:a0:
                    8b:b2:a7:3c:de:1c:d4:95:87:a2:ee:51:39:32:94:
                    6c:20:e7:00:c5:40:3e:91:4a:fb:d1:08:98:30:2b:
                    31:16:18:3d:78:2e:2a:43:03:03:34:65:cf:b4:a1:
                    94:59:d2:28:04:ab:20:20:8c:21:d7:97:e1:cd:39:
                    8a:1a:9e:28:d4:f0:67:f3:0f:36:fb:07:8c:bd:17:
                    e3:01:46:1c:fb:d4:0d:6a:07:3d:4c:e5:ea:2f:a3:
                    99:9c:cb:ca:fe:bd:dd:1a:18:a7:68:bf:96:c9:d6:
                    f9:03:ec:d9:97:8c:25:7b:c0:34:fa:52:d0:f9:08:
                    05:f6:10:3f:f7:99:d3:e6:17:61:2f:eb:6b:ab:05:
                    9e:c6:60:4a:e2:2f:f5:53:ec:10:03:a2:c9:97:37:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:D3:9E:60:D7:2A:BB:B8:83:8E:49:DF:C9:C1:D1:82:D2:30:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:a6:82:15:93:1c:c9:d1:31:33:a5:cd:4b:cf:85:fb:08:
         c8:4c:a5:4b:d2:68:a9:93:04:60:bd:df:23:8e:a9:60:93:e3:
         43:8f:8a:4e:6e:46:16:4e:6c:b5:b2:be:a7:01:6b:1a:2a:04:
         1c:3d:14:58:00:ad:c3:56:12:bc:8b:7a:48:3b:bb:6d:d2:08:
         24:5f:e5:3a:3f:a5:68:16:f4:d0:09:82:e5:39:99:82:e3:04:
         3b:83:0f:6c:79:b0:5a:3d:48:3e:5b:f9:7f:0a:3b:6b:7e:9d:
         6c:0e:50:bf:d4:19:89:4b:22:f3:d4:04:a2:fc:fd:00:51:12:
         87:8e:2f:b7:1d:f2:7a:a1:45:6d:43:6a:52:54:5e:75:7f:0d:
         7a:de:94:f2:e6:a5:26:bf:fa:d6:72:7e:37:db:2e:24:87:de:
         6f:11:af:a8:21:e3:07:23:8f:39:3a:c1:dc:3a:69:68:a6:d2:
         c5:37:cd:33:ee:02:ee:2b:41:fb:7d:de:41:bc:7f:12:a8:23:
         69:75:93:d8:2d:18:da:d3:b7:2b:19:ec:9c:4b:58:b8:b7:37:
         91:ad:4d:33:fb:af:4d:57:ee:40:10:ed:5b:21:15:75:05:58:
         bf:38:3c:4b:10:26:5e:79:96:a3:80:9c:c7:bb:21:1e:d1:3f:
         82:50:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:11:27 2025 by rpki-client