Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
File:                     3929a969-6b96-389e-aeac-0034a05d30fd.roa (raw, json)
Hash identifier:          C0cBz8L05bbqqSYt3Wi4HGn/wJZJ3qdUTngMfBVmyAg=
Subject key identifier:   6E:FA:BB:5A:70:9A:0A:33:D2:97:C5:46:E9:81:32:F6:CC:81:3F:AE
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584801EA265BF7085683ABABE880
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
Signing time:             Tue 26 Nov 2024 12:34:29 +0000
ROA not before:           Tue 26 Nov 2024 12:34:29 +0000
ROA not after:            Mon 24 Feb 2025 12:34:29 +0000
asID:                     55410
IP address blocks:        172.84.180.0/24 maxlen: 24
                          172.84.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:01:ea:26:5b:f7:08:56:83:ab:ab:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Nov 26 12:34:29 2024 GMT
            Not After : Feb 24 12:34:29 2025 GMT
        Subject: CN=e246caec-b25c-4878-90e9-a78a3d479957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:57:ed:43:95:3e:59:70:8a:94:4d:85:72:
                    2e:b3:8a:40:75:7a:30:48:e4:06:ce:69:de:84:b4:
                    b6:18:a2:b6:a9:84:c7:f7:b7:fe:28:77:4c:67:e0:
                    bd:d2:2e:52:5a:2b:af:9e:d3:18:1c:a7:84:52:2d:
                    72:d8:b7:78:85:2e:95:91:15:5e:41:0e:db:13:3b:
                    98:6d:45:d6:ad:5a:47:cc:c4:1f:70:fd:65:7f:da:
                    8a:c5:0b:43:62:cb:86:53:5e:09:f9:15:11:c8:40:
                    b0:c4:0c:1b:3a:14:b7:81:b6:4d:14:d4:3d:7a:e8:
                    ed:61:2b:e3:ca:f1:b6:ce:71:f1:f3:a6:d5:fe:a9:
                    c5:88:92:d4:82:35:a2:c8:30:c5:30:c1:03:c0:e9:
                    ea:53:b8:e0:4a:89:d3:87:4c:09:63:7b:27:9a:a3:
                    6a:b6:f2:f5:58:c7:3d:b0:cb:2f:32:7a:79:29:a3:
                    4c:30:d2:d4:58:b5:35:85:9a:d2:0f:a5:a9:60:ad:
                    84:b5:20:69:b3:19:77:f1:11:0a:35:f0:29:6d:5b:
                    6d:9e:a7:34:a7:4f:89:06:cb:5e:28:1a:9c:d3:44:
                    11:ea:ef:3d:ce:12:a7:50:8a:f6:08:a5:de:92:ad:
                    e6:d2:03:f6:20:bb:56:37:e4:e6:d0:c4:c8:82:9b:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:BB:5A:70:9A:0A:33:D2:97:C5:46:E9:81:32:F6:CC:81:3F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.180.0/24
                  172.84.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:ad:5e:ee:3a:37:fb:6a:7d:1b:2f:f6:e4:79:48:e8:ce:
         fa:d9:1d:89:50:e7:bb:a0:4e:45:fb:b4:94:82:81:d6:be:66:
         f1:1e:e0:fc:8f:da:03:b3:b0:51:15:58:e5:52:55:11:22:5f:
         39:b4:80:2e:6b:6e:77:30:d2:25:5c:68:75:9b:dd:35:81:b4:
         59:28:34:ad:2b:08:3e:71:ba:14:65:ec:86:69:1f:ff:40:2b:
         35:99:17:57:48:fd:9c:3c:18:ce:67:d9:a8:40:e4:b3:31:a4:
         9f:fc:eb:e7:ee:67:2d:fd:c4:fe:b2:3a:88:6b:a0:b0:e0:d6:
         a3:c4:ac:26:d1:e0:ce:70:3f:50:6a:e2:ca:54:80:cb:df:0b:
         de:cf:84:1b:41:88:e4:ba:71:f9:f9:a5:98:1d:53:20:f9:8a:
         69:f8:28:cc:af:79:4a:3e:95:a2:d5:6a:6f:03:93:0d:c3:97:
         6e:21:ae:b0:ce:fb:9b:02:d3:30:7a:d8:90:57:a4:f0:78:01:
         b4:12:ad:41:26:ca:b2:30:6d:10:34:2e:45:4d:ba:77:ed:c6:
         8a:54:39:e1:05:d2:8e:13:9d:4f:b7:11:b0:cf:cf:a2:1a:ee:
         23:05:e6:d8:67:35:31:13:4b:d4:fc:93:17:91:31:18:a0:43:
         92:d2:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:48 2025 by rpki-client