Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
File:                     84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa (raw, json)
Hash identifier:          HMnW1VyfsA7IaSTvQpSniEYNdl4UccvkL8KDEBP96To=
Subject key identifier:   FE:71:69:B4:9B:3A:8B:DB:C3:FF:80:F1:9E:BF:7C:7D:F2:BA:51:45
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285848021507629EA692C61197F888
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     22843
IP address blocks:        67.231.144.0/20 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          208.84.64.0/22 maxlen: 24
                          208.86.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:07:62:9e:a6:92:c6:11:97:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=d52b3064-7d1e-4864-a096-424deabdeef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:0e:8d:1b:09:9c:00:c6:5d:5d:16:bb:59:
                    5d:b1:60:1b:48:2f:e7:49:71:8a:39:ee:56:36:14:
                    33:d2:38:db:fd:ac:22:18:4f:02:da:2f:9b:61:31:
                    79:c3:44:cb:e5:59:c1:97:3b:16:d6:7b:63:37:06:
                    a9:74:1a:be:1f:d9:fe:85:c0:8b:b9:70:2a:80:bb:
                    98:f3:a3:ae:ff:ee:92:24:c0:df:9c:78:48:18:e6:
                    2f:93:ab:0f:bb:f7:ca:41:54:a9:20:4f:21:31:72:
                    d5:18:43:ae:f9:2d:0f:9c:ae:87:05:0a:6d:ce:f3:
                    75:f6:22:b3:22:c5:e8:24:67:2b:fd:cc:ba:47:aa:
                    1d:36:49:0c:75:6a:07:5c:bb:36:18:91:cb:01:86:
                    25:b8:8f:eb:69:67:f4:10:f7:41:49:a1:88:95:c8:
                    e4:84:6e:69:da:cd:49:c7:71:55:fc:0f:8f:1f:39:
                    97:58:c5:64:71:54:0e:eb:d6:29:83:e4:4e:67:72:
                    e5:cf:25:eb:19:5e:3d:a5:ae:97:ea:db:83:90:32:
                    d5:b3:71:d9:9b:08:28:a3:68:f3:a1:cc:89:0e:c7:
                    97:71:5a:f7:88:ba:be:18:d3:e2:fa:37:9f:2f:f4:
                    37:f0:e9:f9:4e:35:a9:62:e2:7a:43:96:e1:20:36:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:71:69:B4:9B:3A:8B:DB:C3:FF:80:F1:9E:BF:7C:7D:F2:BA:51:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:73:27:bc:56:e2:6e:ad:b3:e3:58:12:2a:60:ee:08:7c:
         96:24:3d:23:9c:7a:88:d4:62:2e:ae:d3:1c:6f:fa:26:73:ab:
         7a:46:54:e1:be:79:5a:d6:fd:d3:a3:c2:2c:80:b6:58:ef:12:
         bd:a5:13:e7:aa:8b:45:4c:19:ab:02:44:5d:eb:9e:11:51:3b:
         e1:f3:67:10:35:86:c2:3f:40:43:48:f3:80:a9:47:33:b1:98:
         dd:65:ee:43:bd:97:68:d4:4f:ed:47:96:15:e8:46:d4:56:b2:
         c9:5f:d1:0c:0c:bb:c1:81:a3:d2:a0:06:f1:90:ac:2b:93:78:
         97:45:3f:68:94:80:a1:eb:bf:b4:94:da:a3:65:33:4f:bb:56:
         72:ce:c5:ab:2d:b7:f9:80:a7:d3:a9:4c:01:a1:d7:98:ca:d1:
         a4:8a:a6:d4:9d:ac:13:15:a2:64:b6:44:ba:f4:47:58:7d:3c:
         2d:b5:59:d8:47:aa:f0:08:69:ea:a4:5d:56:37:93:3c:b0:96:
         55:7e:db:0b:49:44:25:f9:eb:6f:b4:f0:51:bb:e7:c6:d6:8d:
         aa:32:2c:af:2c:90:05:65:99:b6:64:84:3a:9e:04:65:a4:eb:
         aa:7b:fc:b4:ac:14:df:1e:21:77:66:07:c3:d3:c4:ff:07:6a:
         bb:2c:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:35 2025 by rpki-client