Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
File:                     d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa (raw, json)
Hash identifier:          VXq/Jy7WSC6CXR+XGSifc6Kp+/ur7uN80NyxIHVrJkU=
Subject key identifier:   50:A2:D8:3C:CA:DB:34:2C:CA:15:E2:9C:F3:E2:46:CD:51:5D:C3:F9
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848143A82F78EFC852BB3F66500
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     3477
IP address blocks:        205.167.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:82:f7:8e:fc:85:2b:b3:f6:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=4bb66aa1-4e43-4786-9a98-91d0db5ddcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:6c:28:26:dd:4a:03:12:fd:e3:6d:70:b4:
                    66:b3:e0:25:dd:8d:10:4b:0c:37:48:03:d4:b6:e0:
                    af:4a:ad:91:fc:08:9f:f7:d6:59:71:c7:af:65:33:
                    13:79:75:a2:cb:3e:8c:90:dc:7d:c1:ba:a5:12:9f:
                    4a:7d:8a:54:04:43:e1:76:e6:ba:f9:03:76:47:b9:
                    f9:65:db:1c:e6:1c:9f:41:05:11:1f:69:15:0f:c2:
                    73:8c:3b:ff:79:6c:18:c9:e9:de:5e:ec:b1:58:d6:
                    d8:46:68:4d:ab:d2:b2:8f:7e:40:0e:df:77:36:a5:
                    62:b7:b5:74:6e:9a:44:92:08:c0:09:f6:66:4b:1a:
                    17:03:ef:f3:7c:78:8f:99:61:bc:92:10:c2:49:6e:
                    31:5c:00:f6:d1:06:da:ba:0e:dd:b4:08:d3:83:8f:
                    b7:16:8c:ba:47:3e:54:51:93:00:0c:1d:32:3b:c1:
                    22:71:d6:07:1d:2f:c6:47:58:f3:e7:41:6e:b5:2d:
                    7e:b0:8b:92:b3:56:92:57:cf:d6:26:6c:1d:bb:b3:
                    d7:41:36:7e:47:ee:e2:a4:94:6a:0f:68:7f:e0:4d:
                    a1:df:1f:7b:8e:b3:75:2e:45:56:9a:01:b5:b2:85:
                    dc:44:50:28:18:da:8f:e5:ab:76:99:36:0f:78:dd:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:D8:3C:CA:DB:34:2C:CA:15:E2:9C:F3:E2:46:CD:51:5D:C3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:67:ac:99:81:c1:39:76:0f:9c:92:9d:58:f2:3e:f9:c6:75:
         28:e8:a9:84:03:1e:e9:a4:0e:86:f5:7d:b7:bd:7b:0d:8c:e1:
         95:d9:ff:87:66:36:ed:ee:4e:90:ee:2f:b4:2b:58:6c:c0:de:
         f3:3b:33:e3:7e:3d:c7:cf:30:dd:93:6e:57:f8:2c:ae:9f:e1:
         40:69:b1:e2:a1:a1:98:f9:3d:ab:b7:c7:18:77:ee:42:60:66:
         5e:ed:62:3a:64:fb:31:56:15:f6:98:46:ab:0b:4e:7d:48:76:
         d8:07:ba:77:3b:b4:60:6c:1b:eb:fa:5f:d2:f7:79:4d:a3:4b:
         11:9f:d9:e7:6c:47:86:3d:83:2a:2d:41:3a:6c:4e:1b:59:f5:
         c0:d3:75:79:50:69:ee:40:c0:a1:7c:7b:64:45:a5:73:d6:82:
         52:83:4b:b7:3d:ef:da:fb:5c:2d:a8:6a:fd:2a:75:5a:3c:20:
         ab:1a:96:d8:ac:2c:ff:0b:f9:0f:22:1b:dc:b6:ef:35:62:b1:
         4c:05:00:a0:47:84:0c:79:cb:09:ea:a9:fb:5c:3e:b5:91:ff:
         7a:23:e8:7c:0c:8b:78:87:51:52:da:95:65:c8:af:17:59:1a:
         3a:c5:d9:db:91:ed:76:76:35:3a:d5:62:54:1a:09:b5:1f:ce:
         f7:52:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:27:09 2025 by rpki-client