Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b/975937b4-ff5b-3682-ace2-55a03ac0122d.roa
File:                     975937b4-ff5b-3682-ace2-55a03ac0122d.roa (raw, json)
Hash identifier:          MtaFRdOB3WOv+hLvsarUWmRUMt16FXTm5zPlqQAREqY=
Subject key identifier:   83:18:99:2F:52:2D:98:4B:60:D2:A3:70:A7:A0:ED:05:3B:76:E2:07
Certificate issuer:       /CN=721ab018-cb59-492e-9cda-15e405d7717b
Certificate serial:       010D0C9F43285849121C04E24886896215CEBE60
Authority key identifier: 06:F1:9D:9B:1B:A0:34:48:C1:FC:90:4D:D6:61:70:FD:45:B2:5B:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b/975937b4-ff5b-3682-ace2-55a03ac0122d.roa
Signing time:             Tue 04 Mar 2025 00:34:50 +0000
ROA not before:           Tue 04 Mar 2025 00:34:50 +0000
ROA not after:            Sun 01 Jun 2025 23:34:50 +0000
asID:                     399092
IP address blocks:        184.169.96.0/20 maxlen: 24
                          2607:c980::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:1c:04:e2:48:86:89:62:15:ce:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721ab018-cb59-492e-9cda-15e405d7717b
        Validity
            Not Before: Mar  4 00:34:50 2025 GMT
            Not After : Jun  1 23:34:50 2025 GMT
        Subject: CN=9a395496-2e4c-41a3-bfd0-cea722201281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:ee:c9:d0:2f:bb:e1:a6:f7:f2:0f:a3:83:
                    18:a9:a2:e1:56:91:45:67:6f:39:4a:f0:ee:a5:95:
                    3f:b8:b7:d7:76:0e:f8:78:0e:40:83:b5:09:e2:7a:
                    44:60:d4:c9:27:9b:7b:f8:3e:e3:dc:d9:6c:47:bd:
                    c2:1d:b6:e2:c9:d4:55:c8:52:94:5d:9b:85:8e:23:
                    b0:05:4d:20:12:cd:53:3f:27:21:58:2a:c2:97:10:
                    e7:93:9a:a8:d5:5d:a4:24:4f:ab:6a:f5:6d:cb:e4:
                    d1:bd:52:92:da:1b:5c:3d:fd:74:ed:74:e0:74:3c:
                    6e:4a:c4:b9:38:6a:24:45:17:c1:da:cc:c3:30:78:
                    c7:e1:86:9a:0d:2f:03:54:13:2e:a2:44:9d:b4:32:
                    74:e9:12:42:7f:41:86:ea:e6:f1:56:71:7e:77:0c:
                    29:0a:55:a0:25:93:2b:e3:e2:f6:fa:8f:86:ae:94:
                    8d:95:ac:7d:6e:a9:31:5f:30:35:f9:3f:88:c6:fd:
                    8d:48:4e:77:bd:8a:28:3d:c6:b7:28:7f:63:7e:5f:
                    a0:a7:67:e3:37:86:a7:bb:79:4d:c9:cb:ee:3e:54:
                    60:3d:e7:42:56:85:bd:92:f6:e1:dd:b0:51:bc:af:
                    ae:57:f6:08:0a:61:62:a0:26:19:12:9b:3b:49:73:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:99:2F:52:2D:98:4B:60:D2:A3:70:A7:A0:ED:05:3B:76:E2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b/975937b4-ff5b-3682-ace2-55a03ac0122d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b/721ab018-cb59-492e-9cda-15e405d7717b.crl

            X509v3 Authority Key Identifier:
                keyid:06:F1:9D:9B:1B:A0:34:48:C1:FC:90:4D:D6:61:70:FD:45:B2:5B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/721ab018-cb59-492e-9cda-15e405d7717b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.96.0/20
                IPv6:
                  2607:c980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:3a:73:22:c0:b4:d4:62:5e:f5:61:d6:f6:6c:e2:80:5f:
         5a:d8:94:15:54:c9:f0:56:a8:7d:8c:e1:a6:e4:d6:a9:4f:4d:
         5e:39:81:af:5f:ef:e1:65:7f:9f:16:12:33:a2:fa:03:c5:52:
         54:e9:bd:30:ce:7e:fd:5b:1e:4d:05:02:31:54:61:9c:5f:3c:
         b8:56:1a:3b:3a:7f:74:10:74:13:12:6d:95:83:05:1f:7f:96:
         ae:74:ca:83:58:d6:aa:be:36:3a:24:d7:27:a2:70:5b:09:9d:
         9e:15:a3:43:77:44:ce:ad:0f:1f:e4:e9:79:64:ba:0f:4a:a8:
         dc:12:e9:6b:63:5c:53:cf:76:ac:d4:b5:b7:73:af:27:6b:e3:
         60:25:2f:ef:bd:d0:47:02:2f:f5:45:38:80:63:6a:d5:9e:fb:
         e8:11:f0:e8:14:0c:0a:9b:a0:76:16:da:7c:92:4e:f3:54:83:
         a8:00:dc:87:e0:93:c8:3f:82:02:46:39:a7:e8:45:d9:90:8a:
         01:65:ce:ff:f4:6f:a3:96:4a:83:7d:48:db:de:02:1a:af:60:
         ed:d3:41:cb:a4:1c:0e:4e:85:cd:de:ae:0b:4a:11:9e:9d:59:
         59:a3:a1:37:b3:9b:aa:29:c2:54:19:51:ef:82:26:a6:7f:e6:
         66:6b:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:10:49 2025 by rpki-client