Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5f210f9-6454-3b51-a4b3-e53fc075a79c.roa
File:                     d5f210f9-6454-3b51-a4b3-e53fc075a79c.roa (raw, json)
Hash identifier:          Q3D55VYQaYNSLMkvTTrNICYlkjIrBXf70DAbkTv6gS4=
Subject key identifier:   7E:0B:21:F3:09:2D:7F:5B:D5:CA:EF:66:45:22:2D:1E:48:CD:C4:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849203C791C6D3B6049311EDD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5f210f9-6454-3b51-a4b3-e53fc075a79c.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        184.24.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:79:1c:6d:3b:60:49:31:1e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=64c0e96f-0615-4ed3-8d42-acb940e75db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:47:1f:2f:b0:4b:cd:8b:b3:e1:be:72:6d:
                    ff:fa:82:2a:cf:27:a7:be:cd:bc:6c:51:43:76:84:
                    cc:51:af:5e:af:bf:8c:c8:6b:9b:a7:d2:ff:05:5c:
                    19:34:fa:c9:78:be:f4:3a:05:ef:91:07:07:61:04:
                    77:04:f1:51:2c:13:be:97:49:45:b4:6e:16:82:8f:
                    b8:b9:8f:73:89:b5:21:00:10:ed:9e:bc:d4:6d:41:
                    3f:8e:1b:1f:e1:42:16:a7:f9:3c:45:88:d2:a3:f5:
                    27:9e:7e:a4:b4:69:ad:7f:1b:a6:a0:93:af:fa:ef:
                    b6:93:09:d1:0e:a7:43:aa:72:38:89:4c:41:ca:4f:
                    47:4e:75:d0:e7:b9:3c:90:ca:81:17:6c:37:89:28:
                    83:6d:9a:13:4e:0f:8c:92:e1:02:ac:36:17:54:01:
                    71:24:0d:cb:55:cf:70:64:10:36:6d:0d:e0:09:72:
                    7d:b2:22:68:1b:7c:ca:26:87:9c:ed:55:fb:c0:56:
                    97:50:fd:27:8c:96:e0:b4:62:73:8e:08:84:66:ce:
                    dc:80:26:6b:f1:22:f5:25:c4:39:0d:77:78:43:78:
                    ea:ba:76:1a:c6:b3:96:d0:0f:d5:d0:b5:c1:4d:4a:
                    b9:9b:2e:9d:90:11:ad:2b:12:a2:77:e4:59:0f:51:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:21:F3:09:2D:7F:5B:D5:CA:EF:66:45:22:2D:1E:48:CD:C4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5f210f9-6454-3b51-a4b3-e53fc075a79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b1:9e:a6:48:74:ea:ad:fc:a6:62:60:54:2b:bb:fd:60:54:
         65:64:46:81:db:54:25:2e:05:61:1e:e2:b0:3a:cd:6f:47:b8:
         80:e7:21:a3:54:4d:fb:71:47:d7:ec:29:01:0c:7d:2d:8a:8f:
         15:b5:3a:ef:49:97:ba:0f:50:9f:ea:b9:a7:fe:e5:55:49:fd:
         fd:bc:16:3d:3a:7a:b7:a9:f6:e7:76:e3:34:d9:af:a5:a9:df:
         71:74:a7:8a:3a:df:36:85:a9:68:b3:98:68:49:69:d1:4a:b7:
         a2:24:a7:cb:64:37:0f:5c:68:df:2b:51:a0:d5:95:86:d4:76:
         43:9e:b2:93:c1:ed:26:b2:dc:a8:da:05:b6:6d:83:e4:cd:a2:
         dc:c9:b7:a3:db:23:0c:46:a3:c7:8e:74:23:b3:b9:92:05:45:
         ce:77:2c:d7:56:7a:d7:a9:e7:64:e4:09:22:57:cb:74:0a:94:
         79:73:5c:47:f0:45:11:87:a4:3a:12:fe:a1:20:6e:78:79:8a:
         9c:66:b5:d0:18:5f:a6:50:aa:a0:d8:fc:f9:3b:34:09:9b:66:
         79:ac:79:0d:9a:99:38:90:8a:6b:87:9a:9f:f4:a8:5b:9f:47:
         e6:07:c5:b9:a0:b7:20:c8:41:88:d3:aa:43:f5:cc:46:17:25:
         c4:e1:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:13 2025 by rpki-client