Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc7a3bf0-6e96-311e-9ec4-2f82570a8127.roa
File:                     fc7a3bf0-6e96-311e-9ec4-2f82570a8127.roa (raw, json)
Hash identifier:          +dMHqAX+8XORi/80+KmgcV2f+qoS1oGS1Dfnd1mtYFg=
Subject key identifier:   10:06:CA:98:01:32:A8:D5:2F:CD:83:BA:D5:DB:0F:D2:DB:A8:B7:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584921841D34396D22C512A8BC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc7a3bf0-6e96-311e-9ec4-2f82570a8127.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        184.28.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:1d:34:39:6d:22:c5:12:a8:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=9a5e653b-b500-4a74-99f7-9f4b842fe9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:cb:22:16:75:f5:f9:2e:07:3f:89:e5:e8:
                    bd:40:db:87:cb:d1:8e:2c:af:e9:e5:59:47:e8:e4:
                    ef:74:18:20:a5:a8:28:e0:04:8d:0a:bd:ec:c4:dd:
                    42:06:00:97:e0:30:3a:d9:4f:16:44:46:3e:74:55:
                    cd:f4:c1:14:ea:89:fd:8f:76:ac:40:07:9c:f0:6d:
                    c0:6b:a1:11:c6:7a:7e:de:b6:1b:d8:21:fe:77:16:
                    02:e5:99:89:d9:b6:ce:27:f5:d6:3f:b3:42:b9:21:
                    c0:22:7d:1d:5f:1d:ea:d1:9d:a2:39:99:ce:a6:f9:
                    d0:0d:46:ac:fc:3d:8a:12:87:70:eb:d3:9e:9f:80:
                    f1:15:1b:86:bd:63:aa:cd:5c:cf:21:94:4b:81:01:
                    ba:0b:b8:f2:b8:e9:f1:e8:6c:26:60:77:21:4b:b9:
                    47:2b:6b:f3:3e:2c:64:ec:38:ec:4c:0c:cd:f2:a3:
                    1f:a8:4e:8c:44:3c:84:3f:8e:0a:ca:9f:ff:ef:bb:
                    33:2c:ab:f2:1c:6e:c9:28:92:b2:cb:70:81:52:5c:
                    86:33:51:55:57:7b:c3:0a:e9:24:97:47:16:07:95:
                    6f:23:93:36:4d:d4:44:29:87:e2:c4:e6:31:1e:ab:
                    0d:00:c5:74:9d:9f:0d:85:c8:e3:8a:9e:dd:01:98:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:06:CA:98:01:32:A8:D5:2F:CD:83:BA:D5:DB:0F:D2:DB:A8:B7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc7a3bf0-6e96-311e-9ec4-2f82570a8127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:3f:db:94:c0:d4:c3:b0:94:86:6c:c4:fd:91:c9:c4:7a:
         7d:85:02:9c:95:13:fb:68:d6:2c:d2:1a:88:34:58:e7:f4:20:
         3e:57:b9:6d:91:5e:0a:3b:95:a8:b3:a7:69:d9:3f:31:76:e7:
         99:ce:89:2b:d2:24:bd:9e:0e:52:7c:50:86:ae:3b:9e:62:55:
         74:28:01:18:e8:0c:32:6c:e1:0d:4b:b6:20:cc:18:1e:65:05:
         0a:c5:83:91:f4:94:4c:3e:da:bb:2f:8c:ce:49:24:8e:41:11:
         90:2e:41:87:5e:97:c3:f0:bd:ab:1c:a0:dc:64:f3:37:13:45:
         63:29:7d:4a:a3:92:b4:00:64:e2:2a:73:1b:e4:16:e4:ad:75:
         f9:2f:b3:1f:a3:15:12:7c:e8:ed:a9:13:90:f8:01:d3:c0:b9:
         28:3e:bb:6e:26:75:76:1e:5f:1a:0a:31:db:a6:0c:5f:8a:2f:
         a8:20:49:36:f8:ff:6f:6d:76:41:24:ea:99:25:64:50:9a:49:
         46:5c:cd:46:bb:29:a3:20:32:4e:60:36:ca:cb:60:b2:5b:67:
         5a:ff:de:51:df:ac:0b:7a:18:d6:a5:66:f2:e3:9c:88:7f:0b:
         2e:98:8d:84:77:cb:35:78:4b:29:1b:c2:32:0d:07:a9:d0:1c:
         41:24:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:59 2025 by rpki-client