Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa
File:                     0b8a1e80-257b-3d3b-a454-55c527409f72.roa (raw, json)
Hash identifier:          b99/Vw4+JHvqbZHxjGkhwkzvN4FmKMXoMOH530yRp8c=
Subject key identifier:   FE:3D:D3:3F:B0:B6:15:8D:9B:4D:A8:E2:62:8F:AF:2F:1D:E3:F5:31
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F43285848D3765D8210F1B1A8764FF000
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa
Signing time:             Sun 09 Feb 2025 14:00:51 +0000
ROA not before:           Sun 09 Feb 2025 14:00:51 +0000
ROA not after:            Sat 10 May 2025 13:00:51 +0000
asID:                     136787
IP address blocks:        172.103.32.0/24 maxlen: 24
                          172.103.33.0/24 maxlen: 24
                          172.103.34.0/24 maxlen: 24
                          172.103.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d3:76:5d:82:10:f1:b1:a8:76:4f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Feb  9 14:00:51 2025 GMT
            Not After : May 10 13:00:51 2025 GMT
        Subject: CN=64a53bd8-36ae-4230-be8d-5a7e477e872f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:a2:c4:96:d4:00:ab:5a:71:2d:53:c7:11:
                    d6:a0:b0:24:a3:7f:58:da:cb:ee:04:e7:3d:8c:a0:
                    e7:57:ca:b0:c1:0f:fc:46:b3:dc:98:2e:61:fb:b3:
                    24:8d:14:97:7a:47:ec:a7:17:55:57:be:cb:47:6e:
                    ba:0f:9b:80:a7:62:88:0e:3f:c1:05:d1:6f:fd:d1:
                    0a:2a:44:09:b7:cf:c1:af:c4:8c:fe:83:dd:7d:ca:
                    ef:a2:fa:7f:72:64:e3:cf:72:13:53:37:44:0b:70:
                    91:07:b0:4e:b3:ec:44:c6:54:94:f9:22:26:d2:52:
                    61:1b:b3:33:80:5c:42:56:a2:e2:48:83:8a:0c:7f:
                    d0:53:e9:68:cc:98:3d:1b:9d:a7:bc:d4:60:6b:c7:
                    ab:48:9f:65:fa:c6:f6:c6:71:cb:cf:f0:57:8d:bf:
                    82:4d:42:d3:60:83:5b:b3:0e:7b:76:70:9a:0d:d3:
                    42:ac:c3:67:3c:7b:63:42:61:a1:c7:e9:c6:e2:9d:
                    6d:de:04:f3:f4:2f:72:87:6d:71:ac:db:06:73:80:
                    b2:82:55:1f:a6:50:82:ac:59:89:1b:3b:d7:78:04:
                    42:84:49:54:1a:f2:ce:54:56:29:b5:74:ab:55:0b:
                    a3:92:c8:65:70:68:0f:db:74:b6:c2:78:3b:af:4b:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:D3:3F:B0:B6:15:8D:9B:4D:A8:E2:62:8F:AF:2F:1D:E3:F5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:13:ac:24:d6:dc:f8:1e:dd:a3:4d:02:ba:7d:cb:cb:6f:
         a9:e0:85:a9:70:61:13:96:85:53:7b:c7:92:11:a0:63:76:73:
         18:d2:86:92:63:62:46:25:c8:6a:52:b4:af:72:27:ff:db:c6:
         a1:d8:a4:86:37:af:ef:29:ae:ca:e5:22:e3:1b:95:8c:dc:89:
         22:b2:8d:81:7a:7a:16:00:7e:d4:1b:eb:e5:a3:44:1e:43:80:
         6a:9c:52:78:21:4c:6c:5e:93:06:e0:f1:3c:31:25:47:c5:cc:
         30:7b:77:cf:a2:03:5a:0c:51:db:85:83:21:68:64:d9:9f:9a:
         2e:8f:f4:9e:98:de:b0:b8:2f:63:ad:25:ed:34:f5:7c:9d:ec:
         8d:b5:06:c1:fd:5f:07:95:9f:71:b6:fe:26:af:8a:89:7e:ee:
         a6:bd:25:dd:44:07:dd:51:eb:15:0c:7f:b7:aa:a6:20:38:5e:
         97:9d:db:a9:8d:09:96:c4:21:be:e7:46:67:02:c7:76:44:d2:
         ca:8d:d1:d5:93:37:e7:e1:f3:60:1b:50:f0:81:be:65:b1:01:
         36:f8:55:c9:b9:75:43:70:1e:0d:98:ce:69:4f:b8:fe:75:62:
         94:8c:28:25:cc:25:82:bc:90:75:1f:0e:eb:3e:8e:8a:a3:06:
         39:16:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:02 2025 by rpki-client