Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5a83ab89-ab21-3293-aa0e-e286c237aa87.roa
File:                     5a83ab89-ab21-3293-aa0e-e286c237aa87.roa (raw, json)
Hash identifier:          s8R5AwgKWkWo1ch240TaFmZNbhn+YiMpjOtRTaiPCQw=
Subject key identifier:   CA:82:58:46:8C:EA:7C:5A:01:50:D2:2B:2F:2C:6B:B4:94:5E:DD:72
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584913AC31BDC4AAC8512B917100
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5a83ab89-ab21-3293-aa0e-e286c237aa87.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        181.224.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:31:bd:c4:aa:c8:51:2b:91:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=8abec09b-cf5a-4982-8a0b-ae61332a9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:28:01:84:25:f0:03:6b:23:05:e4:ab:64:
                    ae:00:d4:ec:24:51:b9:dd:a2:20:60:4b:f5:65:81:
                    65:2d:77:9e:8e:45:3b:0c:0e:7e:83:c4:b6:59:10:
                    aa:07:38:18:f2:92:19:4b:a4:9d:7c:5c:ff:bf:b8:
                    0c:18:64:9b:89:c9:7f:ad:e0:8d:29:cf:2c:72:6d:
                    79:b5:b9:97:21:ac:25:46:ca:26:9e:e7:37:6f:60:
                    a7:bf:ac:0e:a8:ad:a6:e8:c6:17:91:e6:3a:9f:57:
                    f8:5a:70:b1:8c:cf:a8:53:8b:2b:5b:65:28:2f:89:
                    4a:e6:00:03:d4:64:47:db:7d:d0:f7:06:19:e0:cb:
                    6a:e8:0d:e2:fc:1c:45:7a:44:c5:41:b6:42:a2:60:
                    0f:6a:9c:fa:8c:89:b4:f3:bf:ff:35:f6:ca:67:7b:
                    ab:9e:f1:79:52:54:a9:99:c9:e9:ab:28:15:0c:bc:
                    95:53:bd:ab:f9:a5:37:ac:85:2c:65:4c:c0:e8:13:
                    d4:6b:4d:34:23:14:eb:e4:f6:f7:f0:99:a6:68:0c:
                    7f:a1:4c:5b:1b:db:29:fd:96:d7:c0:41:42:5e:00:
                    84:cf:33:54:7b:d9:f5:80:77:15:3c:6a:cf:c7:f8:
                    51:6c:7e:db:79:85:2d:ea:00:98:9f:c5:19:c7:e6:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:58:46:8C:EA:7C:5A:01:50:D2:2B:2F:2C:6B:B4:94:5E:DD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5a83ab89-ab21-3293-aa0e-e286c237aa87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:34:cb:7f:c7:1c:6b:47:fc:47:46:31:7d:5d:9a:0d:e1:33:
         a7:57:69:38:5d:aa:41:1b:9b:83:27:17:df:dd:64:7d:fb:26:
         1d:a9:fb:51:56:37:a7:cb:48:c4:7d:75:df:a4:c6:ec:64:85:
         30:0f:26:d4:f0:99:37:53:f2:3d:5e:51:75:28:a6:0f:23:c9:
         82:88:96:db:68:11:05:29:c1:f5:7d:86:e5:4f:a3:de:9c:c0:
         fe:30:ba:67:f3:cb:ac:21:1e:ce:15:02:a1:72:60:9b:f0:4b:
         a9:04:f5:ac:b1:1a:b9:a7:d1:94:70:5f:cd:d0:d9:6c:5a:77:
         7d:d3:33:5d:be:97:a4:13:db:a9:4f:84:6b:a0:e6:bc:0b:f3:
         86:59:34:71:e0:32:ba:a2:83:23:88:c0:26:db:d7:8a:25:c5:
         97:88:6d:f1:98:3b:99:8a:fc:7b:f3:00:4c:d9:b7:56:82:ee:
         7d:50:9e:00:22:72:96:86:78:e0:ef:fe:55:18:ea:6b:9e:c3:
         b0:ff:db:1b:60:7e:90:a8:e8:6b:ee:81:0b:f9:14:76:06:dd:
         26:75:5a:8d:e4:47:52:b0:fa:8d:38:46:8e:b2:a2:8f:31:a1:
         1b:59:21:4d:f3:ba:bc:9b:f3:f5:8e:5f:d0:52:73:d3:8a:d6:
         ae:87:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:20 2025 by rpki-client