Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa
File:                     7d3d713c-cc60-3241-9e21-c98ee285d28c.roa (raw, json)
Hash identifier:          OqMZU4glwXvbI388TDdss/Do/Y4tPpPV6yQdL1VVJTE=
Subject key identifier:   CE:95:F7:D6:F3:D6:C9:27:91:64:D0:37:A7:A5:E9:61:FE:7E:A2:BA
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F432858486AC595DC82BFDB2F5285A4E0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        170.39.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:95:dc:82:bf:db:2f:52:85:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=79c4f80c-d1f0-47af-89f1-0c807e6b19d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:ac:ef:e5:da:33:96:cb:24:6f:1a:e0:f0:
                    43:b8:cb:2a:72:8b:89:e1:e3:d4:ec:57:68:6d:af:
                    66:04:c7:d4:e3:39:e2:ad:9b:ed:70:6b:ac:d5:9f:
                    10:4b:fc:11:00:1d:ec:73:e9:3e:a2:5e:1e:9d:fb:
                    0b:44:c0:e3:95:b6:4a:70:12:0f:61:7f:00:87:67:
                    f8:66:e0:0b:d1:ba:16:6f:a3:fc:75:3c:38:d1:4a:
                    ed:59:bb:0f:ee:74:3b:f2:53:61:ab:63:80:04:bb:
                    57:49:df:fb:db:d3:2d:d8:62:00:3f:7b:0b:b8:39:
                    fb:09:9f:ca:39:70:a7:8f:1d:58:07:6f:36:eb:37:
                    5c:83:9e:da:92:23:7a:01:f0:72:74:40:f3:80:34:
                    9f:74:29:65:b4:48:a5:ce:6f:79:a0:49:ee:0c:20:
                    09:69:9e:4a:9c:4a:14:6c:b7:6c:a0:75:e6:05:dd:
                    b0:00:cc:60:af:78:0b:57:ed:7a:5b:78:50:1e:ca:
                    36:17:9f:dc:b6:fc:b6:92:eb:9a:ec:53:dd:9a:83:
                    cc:b0:ae:b5:00:8f:df:5b:18:ce:d3:96:f6:7c:aa:
                    88:41:bc:73:85:1a:f4:c9:3c:b9:11:fd:83:82:ef:
                    14:2d:c1:ab:c0:88:01:fc:b7:84:fb:b7:c7:8a:63:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:F7:D6:F3:D6:C9:27:91:64:D0:37:A7:A5:E9:61:FE:7E:A2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:13:7b:6d:6b:83:e3:e2:4f:e7:2b:27:76:c5:98:50:4c:
         29:b0:b5:3e:c7:42:56:46:d4:9d:67:79:6d:e2:26:d1:af:8c:
         c2:68:2c:e6:4c:0b:80:ab:24:82:41:21:f7:30:ec:1d:ab:8a:
         33:d6:20:92:ed:0a:49:69:1c:5c:41:eb:90:ec:f3:e1:14:9e:
         e0:ea:39:a1:5b:a9:e0:83:cb:41:90:5e:43:06:81:c0:0f:04:
         e7:68:5f:ea:c6:ae:a4:7e:dc:9a:9c:0d:3b:86:3e:af:8a:28:
         ce:15:ed:9e:e5:93:a5:e0:3d:c1:53:c5:52:b7:3f:e2:d7:56:
         ff:d7:0d:91:b5:4f:b6:25:d8:92:6d:66:70:5a:b3:f0:6b:e1:
         e9:5b:ef:8a:be:ff:87:12:4a:33:97:84:b0:fb:97:da:af:02:
         84:6e:c3:01:1e:7b:f6:55:1f:04:86:4c:4f:90:6c:a9:e4:90:
         34:a6:91:be:c7:93:2b:c7:31:ae:2f:35:77:cc:0d:cb:b3:b5:
         09:88:2b:b8:eb:be:cd:f2:82:4d:41:c5:1d:75:29:6c:d8:60:
         a0:94:54:03:ca:84:97:74:61:5d:c7:02:61:40:ff:3a:e4:b9:
         14:0e:e1:e7:c0:1b:5c:18:59:55:8a:ea:8b:d9:6f:e9:61:2a:
         70:09:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:13 2025 by rpki-client