Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
File:                     5defbc32-1cf4-3d58-be45-b2975f3026fa.roa (raw, json)
Hash identifier:          ASD4VNPQO2CXTgRIeeLh0IRUKspONnWxFvA11JMtuPE=
Subject key identifier:   05:5C:52:56:DB:8F:8F:B7:1C:AD:24:21:4F:C3:79:4E:54:1C:E4:5E
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F432858480EA5121589E08415A2D73010
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:12:15:89:e0:84:15:a2:d7:30:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=acad5e7b-9d27-4f26-a8e2-bdae64d29ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:78:47:7c:d6:f6:f2:44:7a:9f:9e:58:77:
                    b2:40:01:ae:a4:7a:63:89:09:78:8d:78:1c:b6:40:
                    87:a9:1a:a3:c2:4c:81:38:47:34:a4:a3:3f:ac:b4:
                    6a:81:b5:5f:f9:54:30:e0:37:e4:b5:fe:32:28:62:
                    c2:b8:5b:10:2c:77:e2:f7:25:02:43:1e:7f:57:74:
                    68:db:52:ed:70:0c:4c:af:49:25:61:64:00:d4:f4:
                    71:e6:8c:7f:87:a5:ca:91:69:ab:1f:d3:0d:9e:f0:
                    bd:4f:dd:28:2b:06:df:6d:37:40:df:2a:34:cc:9b:
                    81:b1:4c:9b:8f:16:97:97:9b:4d:4f:25:aa:28:28:
                    22:a5:95:b2:4e:2b:ec:6c:4c:23:bf:83:22:b5:0d:
                    88:f7:ac:cc:3b:db:0c:b8:4d:0c:d1:27:c2:c2:11:
                    4e:bc:0d:6e:71:40:87:04:a6:c5:a9:2d:1a:46:ab:
                    e0:7d:4c:86:45:05:92:72:2e:d3:86:34:67:26:84:
                    02:60:0c:bc:66:34:18:b8:9b:44:83:75:77:13:21:
                    7c:e5:de:17:39:9e:8f:f4:34:b6:03:01:fc:2f:5f:
                    fc:fd:89:42:6b:fe:77:29:41:1c:d5:79:c5:ec:7b:
                    c0:18:36:43:8a:3e:75:b3:13:8e:11:ad:a1:aa:a4:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:52:56:DB:8F:8F:B7:1C:AD:24:21:4F:C3:79:4E:54:1C:E4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:df:01:9f:b0:fb:a0:b4:86:ff:d7:74:35:13:19:24:87:
         20:e7:b3:f1:31:3f:2a:c1:e8:3e:f7:c4:71:71:2f:77:c8:1b:
         52:03:87:11:73:c0:b4:9a:4e:7a:fe:b4:3d:b9:62:58:3d:9e:
         93:ce:c4:5e:8b:d6:84:73:14:5c:46:45:2f:16:25:ed:c9:9a:
         ec:53:45:2e:99:e6:30:9f:64:f3:d9:d7:e6:54:f1:e8:e7:b6:
         7b:37:bb:a0:a7:45:66:32:f9:ba:f1:c9:fb:c6:97:83:b8:b0:
         84:c8:f8:81:53:ed:78:86:4d:39:42:f9:2e:61:f1:ef:f0:78:
         75:72:bc:02:9c:3f:52:12:40:b4:aa:47:d2:d6:ff:30:7e:2c:
         40:1e:ce:73:12:2a:e3:f9:48:f4:cb:04:53:09:31:3a:e7:b8:
         58:5c:6f:d7:2d:2b:2c:af:cb:72:2f:db:a2:3a:83:eb:f0:ee:
         bc:14:b7:30:98:c1:79:b8:dc:91:d4:46:89:34:d9:e4:7e:21:
         5a:a3:bf:0b:60:d2:4f:d8:c7:56:de:32:77:56:bd:64:65:f4:
         d3:08:a1:c4:b0:ab:24:c8:58:57:29:a7:fe:0e:22:fd:e5:7e:
         92:2b:db:97:4c:cf:c3:b3:f9:6f:89:2e:ef:65:5c:91:ad:f0:
         96:0a:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:04 2025 by rpki-client