Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa
File:                     087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa (raw, json)
Hash identifier:          bhTLTR+vXibK5FrhQfPcoxNW+qPEfiHS7HPSSZo5j/A=
Subject key identifier:   27:0A:A7:06:33:84:F8:DB:92:E3:9A:DD:52:19:81:87:1E:71:29:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584921843126436892D49742C680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.29.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:31:26:43:68:92:d4:97:42:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=14db0274-6527-4a46-80b2-d9d257bc6c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:23:43:b1:ef:92:1b:04:87:52:bc:8f:f8:
                    19:a0:ac:e5:52:00:62:f6:55:49:10:bc:3b:d4:67:
                    25:e5:89:1c:43:dd:e4:cc:6c:6b:97:30:0e:2f:55:
                    f5:2d:a4:7b:f2:9c:cb:0c:84:b9:d1:9b:7a:d5:bb:
                    ca:d4:d5:d8:d0:89:96:f8:40:68:18:db:a8:6b:31:
                    c9:e9:ab:48:f3:b5:48:2a:92:26:ab:61:b2:b5:17:
                    85:b2:ad:a5:d9:2b:c9:0b:6a:d4:01:c7:75:9e:f5:
                    48:ae:f3:af:e3:ee:1b:d9:fe:59:22:c0:90:34:2b:
                    ba:eb:27:8c:36:fc:71:a4:e4:f4:a0:63:f2:cb:f8:
                    f7:5d:39:15:fb:ab:3f:34:f3:e8:a8:ec:92:40:57:
                    7d:05:10:a0:58:4e:0f:3e:75:eb:86:37:20:c2:31:
                    37:75:f6:f6:1c:e7:fd:ab:0d:ad:fc:1a:97:01:18:
                    8f:90:0d:46:1a:7c:a2:4c:17:7d:81:01:6e:11:1a:
                    a2:6e:88:75:b8:c7:cf:7a:ec:6f:20:fd:17:b3:86:
                    7a:3a:da:e2:ec:c2:74:38:b7:92:81:a3:0c:f3:11:
                    7e:71:25:4d:4f:ca:04:01:86:f3:af:71:1d:9f:4c:
                    c5:70:9e:03:79:03:a3:b6:0a:60:c3:31:7b:20:34:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:A7:06:33:84:F8:DB:92:E3:9A:DD:52:19:81:87:1E:71:29:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:f7:ab:29:7b:33:d8:7b:42:3d:46:f7:c0:a0:4e:df:71:
         00:29:0c:3c:af:a9:f5:b8:98:a1:74:0d:59:cf:16:e4:17:2d:
         e1:a8:d5:ea:0d:0b:bf:52:e7:56:72:96:12:b9:2d:19:ff:7c:
         cd:49:73:8b:ed:45:d9:e8:06:5e:4a:40:2e:a7:1a:51:95:49:
         80:ab:39:1d:08:fa:47:ef:d1:26:36:fd:aa:1e:09:0d:f7:74:
         e0:1a:07:55:4a:a8:01:f6:6f:31:66:7a:5f:e4:1d:c0:87:65:
         56:b9:8b:de:fe:8e:08:a9:ef:54:45:00:81:02:8f:30:6a:79:
         17:eb:43:ea:4e:32:3d:34:c4:65:68:3b:66:d6:f9:28:09:fc:
         e5:4b:0b:7a:2f:b6:01:3f:3e:e0:6b:9e:b6:0c:46:fd:f8:4c:
         53:06:a3:41:8c:b8:6e:b4:41:6e:6e:ff:59:5a:0a:5f:84:ea:
         51:02:79:5b:1e:33:1f:51:53:74:a5:1c:aa:ad:1b:97:58:2f:
         68:4b:0c:f9:2a:44:d1:c5:b7:48:dc:58:d0:8a:38:8a:fa:f8:
         9a:f4:60:a4:ab:d9:0d:8c:6d:fd:05:2d:ae:79:84:3c:67:5a:
         6c:78:b4:64:05:59:e9:3a:64:4b:8d:d6:39:a6:85:03:3c:21:
         9c:0e:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:22 2025 by rpki-client