Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/aef7eab9-6b16-3cca-b1eb-844381ed13fc.roa
File:                     aef7eab9-6b16-3cca-b1eb-844381ed13fc.roa (raw, json)
Hash identifier:          WCTl/GUj2q3auhuppOH5M6SCLL0i1RCQwXkC+yjp8dQ=
Subject key identifier:   CB:F1:73:7C:0D:5A:4A:CA:5C:CC:20:51:0F:91:44:75:20:B6:DA:E2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858487CEB3A86BBBFDC8D6AFBC080
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/aef7eab9-6b16-3cca-b1eb-844381ed13fc.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     393249
IP address blocks:        142.231.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3a:86:bb:bf:dc:8d:6a:fb:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=33654166-8372-4b08-84bd-e03915668404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:89:98:96:d8:3f:ee:13:3e:0a:91:8c:e0:
                    73:da:9e:8b:32:b8:80:2b:3c:f7:5f:56:3a:79:df:
                    0d:50:cc:5c:b1:08:e4:37:68:a6:70:30:33:1a:e2:
                    50:93:4e:9e:75:98:f7:80:65:2c:d9:9c:35:14:75:
                    12:82:16:c0:54:4f:bf:06:e9:47:99:97:48:38:ec:
                    39:6b:26:9d:ff:e7:a6:16:11:15:a3:f7:ed:7c:d0:
                    58:4e:7b:dc:1b:2b:39:e9:43:fb:1a:64:ab:a0:ec:
                    22:d2:24:6f:37:de:d4:aa:ce:50:03:3b:09:7c:35:
                    20:b6:8f:6d:80:6f:81:59:f8:22:b1:8d:20:ed:4c:
                    c4:cd:cc:15:ce:ef:d3:63:6f:0a:76:39:b5:33:bb:
                    9a:53:8b:a0:05:fe:12:84:c8:e2:09:bb:2a:72:b0:
                    32:3e:8e:41:f4:1b:43:5f:eb:1e:a6:55:de:f7:2f:
                    bd:1f:e3:98:c1:2d:d8:5b:56:0c:66:cf:cc:ea:6b:
                    f9:a0:5b:00:9e:4f:90:a8:c3:b0:45:e0:c4:d1:d1:
                    81:55:65:1e:60:c0:92:c7:48:e9:b0:49:81:de:4f:
                    44:92:f5:9a:da:e4:ca:41:2c:d1:d4:90:24:68:84:
                    f6:a8:17:6b:fd:e4:c5:ff:96:51:03:bf:7b:09:7d:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:73:7C:0D:5A:4A:CA:5C:CC:20:51:0F:91:44:75:20:B6:DA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/aef7eab9-6b16-3cca-b1eb-844381ed13fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:25:a1:75:e3:81:ae:42:b3:e5:6d:dc:1d:01:7c:d7:03:a0:
         80:e9:22:38:ba:f1:0a:60:35:a2:07:91:8f:c7:8f:6e:7c:94:
         42:54:2c:be:7c:1d:e3:8e:ad:6c:96:5e:2c:95:d7:ec:98:e6:
         47:fd:e8:dd:07:13:15:a7:a1:c5:23:c2:92:d1:47:79:c2:7d:
         f8:53:d6:e5:29:cd:a4:3e:8c:b5:f3:44:c8:8a:26:8d:0f:6e:
         5d:2a:b9:9e:28:5c:bc:ec:8d:8b:ee:24:9c:d5:b6:5b:b4:11:
         fd:bc:f2:1c:a1:be:d2:10:70:bf:90:22:9e:48:a6:37:90:7d:
         58:59:57:e6:8a:9a:ac:7c:35:80:85:41:6d:fa:df:57:4e:ed:
         a3:95:ef:bc:84:e0:fd:d4:46:bb:4b:f6:f3:85:5f:b7:b3:0c:
         2c:3d:82:4f:16:3a:d0:ed:36:96:6c:50:5e:72:72:22:77:44:
         0e:ab:f0:9c:ad:e5:8d:de:61:30:c2:c1:eb:c5:f6:bf:11:f6:
         cc:c4:d9:65:02:7c:8d:31:92:51:56:3d:9a:ac:87:19:d2:07:
         8b:07:94:5e:2d:40:81:36:3d:64:1a:13:a5:37:ea:2c:82:1a:
         0e:da:ef:54:6e:66:be:53:f1:85:58:16:ba:f3:07:97:68:af:
         aa:9e:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:29 2025 by rpki-client