Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
File:                     06ec3548-40e7-370d-bd70-b74b5c67021e.roa (raw, json)
Hash identifier:          Enhpp6sXitya6oGX4KlU964SvL46e6GmfqccvIMsV3w=
Subject key identifier:   79:C6:95:42:FF:FB:A9:A6:DD:73:FD:69:7E:37:B2:49:75:6A:25:42
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858491ED6D7003F66D28E25352AD0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        170.176.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d7:00:3f:66:d2:8e:25:35:2a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=932623ef-4f95-411e-9021-e9b57a1b7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:d5:8c:e8:dd:fc:06:23:0a:b0:05:c9:1a:
                    ba:5d:38:45:be:7f:f7:2a:28:7c:8a:c3:04:33:1a:
                    73:6c:e9:ef:c5:a6:89:8d:4d:c3:a9:6c:98:99:ff:
                    5d:3f:4d:6b:5e:5e:25:b1:89:7e:1f:97:0e:34:27:
                    94:44:9e:57:48:3b:3e:01:2c:1b:fa:4b:7a:29:7c:
                    a2:63:6b:60:da:bc:fc:7e:6e:43:62:2f:e8:25:80:
                    1f:33:b3:83:d0:fb:67:bf:55:db:34:47:f2:8f:e0:
                    7a:98:a3:6f:c6:29:9b:7f:1a:9d:b0:bf:6a:8c:51:
                    03:e1:96:35:7e:86:07:46:dc:84:7f:b8:7b:c3:13:
                    2f:c9:95:7a:68:bc:47:15:8e:7e:af:01:aa:53:7a:
                    c8:58:88:69:ae:16:dd:1a:61:c9:e0:98:f7:6e:c2:
                    06:1a:1d:1d:69:28:c7:4e:d6:b6:0b:92:e5:90:b6:
                    f0:45:7e:75:29:38:6d:2d:93:7e:83:cd:42:7e:79:
                    cb:d2:53:2d:ad:22:b9:07:ef:7f:d8:d1:65:51:49:
                    06:83:83:37:9c:b3:0b:a2:46:a6:0a:ac:ed:38:a8:
                    2a:10:66:8c:97:74:6a:65:45:03:dc:94:ea:b7:8d:
                    1c:17:04:35:ec:98:6f:aa:09:7e:2a:e4:8d:d5:6d:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:95:42:FF:FB:A9:A6:DD:73:FD:69:7E:37:B2:49:75:6A:25:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:e8:d9:89:63:6c:de:cd:3a:e6:fa:fe:cf:6c:da:a0:49:
         97:15:11:c2:a9:7e:0f:da:d1:2f:97:53:62:c8:bb:0b:ee:ec:
         e2:82:0d:00:e2:fd:70:a3:bf:74:9d:a8:13:c8:fa:ac:33:b0:
         90:b4:25:3b:22:d2:88:bf:81:08:0d:66:fb:c3:c9:a5:bb:52:
         6a:56:24:c9:d0:03:8c:7d:4b:03:59:23:8d:4e:f4:f0:15:43:
         93:98:fc:c7:23:00:3d:0a:ad:b8:b0:17:4f:bb:99:00:25:86:
         85:9a:84:32:d2:58:68:4a:a4:bd:9a:fd:af:08:4c:d9:76:59:
         1b:25:aa:5f:ee:bd:6e:a1:96:a5:09:f2:4e:b1:64:1f:b7:90:
         5d:c0:dd:93:c2:81:f4:6f:50:b9:96:fa:b9:49:b0:a6:74:0f:
         0d:76:58:80:31:b9:08:44:bb:0c:d1:d3:bb:54:61:61:e2:8e:
         1c:bc:46:40:0a:dc:14:de:a6:ad:90:b2:0b:41:7d:7f:ab:ec:
         01:25:14:33:f5:2e:78:7c:bf:2a:f2:99:c7:91:8c:4b:36:55:
         26:53:2c:7e:ab:d4:b1:89:84:e9:8c:05:4b:75:7d:81:56:f9:
         e6:03:33:42:6b:51:01:4e:15:08:a3:7c:31:78:c1:af:83:41:
         46:89:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:07 2025 by rpki-client