Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa
File:                     a31730f9-097b-3034-9b42-5724baebff75.roa (raw, json)
Hash identifier:          rtwDN1/r24KiJA+xpun0giDU9T6EcYTLo5kUuS/UjUM=
Subject key identifier:   28:22:27:06:62:83:E1:55:FE:9E:B5:34:03:D1:DA:F4:FC:32:D0:56
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F432858487FB5E491AED1302043AAE158
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     14579
IP address blocks:        167.80.77.0/24 maxlen: 24
                          167.80.102.0/24 maxlen: 24
                          167.80.134.0/24 maxlen: 24
                          167.80.177.0/24 maxlen: 24
                          167.80.244.0/24 maxlen: 24
                          167.80.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e4:91:ae:d1:30:20:43:aa:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=e9c8bd21-2ff9-4848-9a62-9bafedb3ac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:e4:56:f1:f9:bd:8e:b6:33:81:15:78:ba:
                    82:42:a6:f0:68:ef:a7:78:37:9f:27:71:4f:93:d3:
                    74:c4:fd:54:0b:90:5d:54:06:de:bf:03:72:fe:51:
                    dd:24:52:c1:f6:6b:cc:d3:c9:c1:48:28:bb:92:3a:
                    22:31:ab:90:9c:8e:b4:63:02:16:0b:7b:11:80:ba:
                    3d:31:0c:78:aa:e1:81:12:58:3b:22:61:ce:02:98:
                    a9:c1:7e:28:70:0e:f2:8f:40:58:46:97:4d:dd:49:
                    a7:4e:d9:21:ce:49:33:b0:2c:a6:ad:ed:b9:04:86:
                    2a:23:76:ec:dd:5d:f2:d7:7a:82:4b:bb:ec:7f:1f:
                    d7:80:84:42:07:b3:2c:99:ba:4f:c4:e1:6a:2f:c5:
                    5f:94:dd:ae:87:22:9e:92:6c:9c:e8:a0:96:f6:32:
                    e7:70:b2:f5:e4:f9:9d:55:35:23:ef:ea:3a:b3:d8:
                    79:01:27:51:b4:38:c3:51:1b:e5:a5:81:42:75:8d:
                    0e:46:43:b2:76:23:3c:cc:26:7e:d6:28:66:a0:0b:
                    34:a2:04:7e:a4:58:80:72:24:00:36:2f:16:66:24:
                    db:42:d7:71:2c:10:2c:6e:c8:48:b1:54:14:17:d1:
                    41:85:15:89:49:f2:31:7f:06:e1:13:80:d6:df:06:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:27:06:62:83:E1:55:FE:9E:B5:34:03:D1:DA:F4:FC:32:D0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.77.0/24
                  167.80.102.0/24
                  167.80.134.0/24
                  167.80.177.0/24
                  167.80.244.0/24
                  167.80.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:66:ab:c7:8e:ed:8f:4b:e8:3c:dd:f9:e4:d1:4b:b6:b7:c3:
         7b:90:ac:0a:19:7f:0c:03:56:5f:bf:37:e5:6c:3d:ac:60:c8:
         03:ff:22:86:70:ab:fd:8d:87:74:15:47:3c:34:ee:08:43:6b:
         7e:87:0f:49:b1:35:98:fc:aa:9a:1c:a1:3d:a8:e4:44:41:4f:
         f6:11:c4:ea:9d:88:c0:93:f8:c0:d4:99:fd:d6:f2:21:f1:55:
         29:e8:31:eb:ff:df:18:5c:0a:9d:18:ff:a6:4a:f9:df:d7:a8:
         8e:63:21:7a:69:64:13:bb:33:3d:90:da:8d:91:ac:43:a4:07:
         17:88:d8:5c:88:4f:76:21:9f:c3:b3:26:6d:6a:a9:77:e3:38:
         89:5e:69:76:dd:91:c9:ee:56:6c:eb:3a:9b:68:a7:3f:36:f8:
         59:31:4d:50:57:93:29:7d:8d:c7:b7:14:83:b2:15:a1:c6:a0:
         51:34:84:48:4c:ef:df:ea:d9:bf:54:c5:7f:55:cd:30:b9:d3:
         c7:f0:5a:5d:13:04:87:e0:92:44:58:36:42:f9:2f:13:cd:a6:
         db:70:0d:ee:68:c7:df:ab:24:66:1c:22:69:ee:2e:2d:4d:e9:
         d9:c7:44:4e:4e:b2:aa:ab:b2:30:0a:55:4c:84:e8:ed:75:35:
         43:1e:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:29 2025 by rpki-client