Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32bbace7-12ea-3e92-9360-9e893665ebba.roa
File:                     32bbace7-12ea-3e92-9360-9e893665ebba.roa (raw, json)
Hash identifier:          kyaDw3d/0fnZjJKnwlLBdXbpCQQn+iGoENpKTjfmZ6E=
Subject key identifier:   FC:17:8A:DA:A8:8A:04:63:98:E6:B3:15:33:65:DF:30:81:81:37:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584917DC3D15DF37055C60862B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32bbace7-12ea-3e92-9360-9e893665ebba.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     35994
IP address blocks:        184.28.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:3d:15:df:37:05:5c:60:86:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=09ed785e-eef0-44cd-afa3-ae2d0e6a1c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:bf:30:f4:fc:36:df:f3:7c:98:d3:e1:9e:
                    02:64:6f:17:d4:fb:57:c7:9f:8d:53:10:74:91:f1:
                    fa:bc:14:ef:18:d8:bd:fe:97:a9:38:a6:ac:28:79:
                    f7:b8:c9:58:27:13:b7:0d:3a:06:f6:e8:26:f3:3c:
                    fe:e8:0b:d5:07:a4:9b:99:78:84:ee:b8:2a:aa:8c:
                    d8:ab:ae:ed:a0:fb:98:34:48:fc:99:ca:10:32:42:
                    4d:4d:db:11:76:2c:45:c2:0d:dd:ad:43:9d:33:be:
                    c1:64:b5:ad:25:b3:dc:3a:59:b7:23:f1:ed:3c:cd:
                    68:e1:8b:b2:d6:8a:87:c0:01:30:3e:65:02:8b:8b:
                    75:b4:70:12:c0:08:23:1e:b9:83:ac:f2:d1:e8:6b:
                    5b:63:17:d1:db:f1:72:dd:86:17:02:c1:92:ab:aa:
                    ad:6e:43:86:4d:be:67:02:61:c2:fa:bd:6a:0f:e9:
                    4f:bf:37:64:99:92:ab:b6:23:96:28:66:6a:51:a4:
                    26:a3:31:91:eb:e9:f2:67:04:6a:8d:64:70:6f:94:
                    a1:fb:17:28:25:05:da:c5:6f:46:5f:2d:57:af:06:
                    48:00:13:b9:4f:a1:72:78:75:cd:18:0e:84:1b:4c:
                    cc:c2:74:89:c0:60:03:c1:17:9e:f1:c4:09:22:dc:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:8A:DA:A8:8A:04:63:98:E6:B3:15:33:65:DF:30:81:81:37:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32bbace7-12ea-3e92-9360-9e893665ebba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:01:6f:6f:4b:7d:dc:16:5a:e3:7d:00:b8:93:a0:75:82:
         d3:54:98:73:ba:68:ba:e6:80:54:b5:6c:ab:c7:55:eb:17:ef:
         d9:1f:44:88:e5:20:4b:96:76:8a:8c:7b:4b:fa:fd:97:c7:8d:
         a9:07:cf:2d:27:ae:0b:87:95:df:58:70:12:9c:86:e2:86:85:
         cd:e1:e8:3f:05:62:93:0f:40:89:12:67:0f:49:bc:24:f1:c0:
         23:78:60:ac:a8:ec:8b:51:76:7b:1e:ca:8f:36:be:47:ca:5c:
         69:90:fa:c0:2b:ab:2a:ea:ea:51:08:aa:15:a0:7a:0d:ea:be:
         7f:e8:6a:d2:78:73:29:2c:fd:76:a4:6a:5c:38:9b:79:6f:d3:
         ad:56:70:78:35:7e:f8:d5:53:c8:b5:04:9e:33:ba:15:db:ee:
         8f:16:44:43:1c:f1:b6:83:be:8a:ba:d5:a5:e0:8d:4b:3e:33:
         7e:89:13:83:96:bc:f6:53:3d:d7:64:a2:4e:d4:5d:4a:e6:57:
         1e:ab:92:dc:62:e8:45:bb:64:b3:86:ea:b7:ee:67:d8:e9:98:
         c2:1d:47:b7:a4:99:c3:bc:51:c8:19:27:5d:cc:b5:8b:ef:c7:
         65:b8:c3:34:cc:67:32:db:0f:8a:4d:44:1c:07:e4:2f:cd:1f:
         ed:27:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:40 2025 by rpki-client