Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1e01417f-2620-3edb-bd0d-165c17520bec.roa
File:                     1e01417f-2620-3edb-bd0d-165c17520bec.roa (raw, json)
Hash identifier:          YgOZki1HO7uPQbJikRwkM2lI9j8cn3xxCxixOm2HJ1U=
Subject key identifier:   38:52:A3:42:C0:DD:22:AE:95:11:6D:AA:88:44:FB:F5:D9:CA:4B:63
Certificate issuer:       /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial:       010D0C9F4328584808A00521F7A5BD6222C54340
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1e01417f-2620-3edb-bd0d-165c17520bec.roa
Signing time:             Thu 28 Nov 2024 22:15:46 +0000
ROA not before:           Thu 28 Nov 2024 22:15:46 +0000
ROA not after:            Wed 26 Feb 2025 22:15:46 +0000
asID:                     17117
IP address blocks:        12.17.158.0/24 maxlen: 24
                          12.129.131.0/24 maxlen: 24
                          12.162.219.0/24 maxlen: 24
                          12.179.178.0/24 maxlen: 24
                          12.184.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:08:a0:05:21:f7:a5:bd:62:22:c5:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
        Validity
            Not Before: Nov 28 22:15:46 2024 GMT
            Not After : Feb 26 22:15:46 2025 GMT
        Subject: CN=de5bcc8c-499b-4d54-b64a-1a7156163ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:4e:10:82:9c:9d:3b:1f:68:ca:c1:28:e5:
                    c4:6c:2c:1b:b2:52:fd:c4:8c:3e:24:4e:6b:a0:df:
                    89:9f:a8:3c:5a:f7:94:d2:46:7c:22:0a:31:2a:2e:
                    f1:46:7c:7b:36:f9:57:9f:b3:21:1b:d4:3a:ce:9b:
                    79:05:f0:d2:20:b1:e7:d6:97:2f:bd:88:b5:78:4c:
                    9e:cc:a7:a5:d7:16:ea:d5:d1:a1:0d:47:2c:22:e8:
                    08:f5:59:5e:e7:b6:eb:63:cd:60:d7:f4:d1:30:24:
                    b4:ac:06:06:46:c7:ed:8a:b7:36:28:16:63:52:94:
                    3c:dd:10:3c:c5:50:2e:3b:69:ce:68:a9:99:71:66:
                    06:73:0f:7c:1d:e9:0f:8b:68:96:0e:59:ef:8e:fe:
                    06:14:55:15:01:e8:0f:4f:bc:8f:47:78:95:ad:86:
                    d4:ef:cb:c0:03:ef:3a:c2:f4:08:4f:f0:94:92:79:
                    87:22:f4:c5:38:a4:d1:b3:2c:90:9d:75:6a:3f:f4:
                    4b:ad:d2:03:f5:8e:8f:e1:4c:9e:37:e1:7c:77:b6:
                    b8:98:a5:5a:cc:47:74:72:22:c6:57:bb:1c:13:e8:
                    86:30:4c:78:cf:1b:12:82:d6:02:b8:24:26:1a:12:
                    e6:8f:2d:b9:78:d1:cb:bc:69:63:9d:ad:ef:5b:73:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:52:A3:42:C0:DD:22:AE:95:11:6D:AA:88:44:FB:F5:D9:CA:4B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1e01417f-2620-3edb-bd0d-165c17520bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl

            X509v3 Authority Key Identifier:
                keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.17.158.0/24
                  12.129.131.0/24
                  12.162.219.0/24
                  12.179.178.0/24
                  12.184.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:bd:9b:8a:9e:a0:1b:5f:74:d6:d4:8a:43:8c:1e:50:53:03:
         a6:8d:a6:57:3f:04:74:73:f5:d0:61:58:0e:0e:f6:db:57:47:
         a7:70:b7:71:16:e5:2c:1a:23:8a:83:84:02:2e:eb:26:5e:80:
         d4:b9:4a:0e:25:ea:8e:41:7c:92:aa:3f:13:3b:f7:6a:b1:1b:
         a9:d4:87:34:e4:17:d4:e7:b2:a6:96:7e:7c:64:70:1a:4a:62:
         9e:c9:51:18:88:0a:86:b6:ba:54:aa:4c:6a:52:28:1c:13:d9:
         7c:54:5f:76:75:94:03:bd:f7:01:ae:2c:24:78:43:9b:6e:23:
         8b:47:32:a8:0c:22:a6:dd:24:dc:f6:ee:8c:21:ee:87:10:d7:
         d9:f8:72:d3:70:22:13:4e:38:eb:cb:3b:8b:32:e6:b4:d2:e5:
         b5:12:58:23:00:dc:55:f1:db:75:fa:11:9d:2c:b9:e1:23:96:
         31:32:9d:a1:47:09:33:81:ed:a3:08:ec:6c:dc:88:f1:7b:63:
         2d:50:85:a1:ef:0c:8e:85:34:14:98:c5:7b:68:93:2c:56:f5:
         c9:65:f9:d6:a6:4b:87:17:3d:54:17:56:ed:c6:b8:fe:6a:48:
         86:f4:90:23:f7:c6:4a:15:e6:0a:c6:81:d3:50:17:9d:18:6f:
         99:f7:26:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:47:55 2025 by rpki-client