Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1a5f88f8-e5ac-36ba-a6b8-2bea66a7ffbc.roa
File:                     1a5f88f8-e5ac-36ba-a6b8-2bea66a7ffbc.roa (raw, json)
Hash identifier:          gKVhe7RcfsCAc+04kVg5CMPv6JIRbyhthBhXvdpURuo=
Subject key identifier:   73:C7:2E:25:A3:FB:2A:F5:5F:47:35:40:92:AC:A6:A6:7E:AB:4E:98
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848037B629A88743B8CBDDB0D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1a5f88f8-e5ac-36ba-a6b8-2bea66a7ffbc.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11537
IP address blocks:        162.252.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:62:9a:88:74:3b:8c:bd:db:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=58860e57-1607-4b27-b75c-ed92718a6d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:b8:d2:86:67:57:71:40:22:c8:bb:3e:de:
                    88:04:14:60:f9:c6:90:8d:fe:f9:16:4e:ff:04:5a:
                    33:f1:f1:95:b4:26:c2:8f:b9:48:27:a6:fe:78:e6:
                    0f:ae:84:f0:ff:05:fa:d3:18:f9:89:23:51:31:cb:
                    e9:95:96:40:65:2e:a2:7a:3b:9d:31:0d:da:a3:ed:
                    f6:cf:e3:ed:09:f0:6c:08:80:4e:cb:93:91:df:5a:
                    77:5c:5a:ec:00:a1:94:08:64:1c:4e:e9:e5:6e:3c:
                    f1:7a:eb:17:5c:f0:fb:37:06:15:08:7d:4b:35:64:
                    6b:eb:08:9b:51:bb:3f:27:36:c9:53:94:8f:74:e4:
                    23:22:a0:4a:8d:43:60:83:38:74:ec:2b:d1:34:15:
                    8a:fe:fd:bf:4c:59:08:f4:e8:15:b8:ae:7c:4c:b7:
                    70:16:e2:29:55:82:1f:f8:fb:bd:70:96:97:a9:ff:
                    76:11:7e:51:47:f5:e9:dd:8d:47:c9:a4:e6:2f:07:
                    0c:17:69:2a:1b:be:a3:d5:a1:0c:38:28:a8:10:53:
                    77:f1:0c:bd:71:2b:14:ae:a7:55:07:2c:2d:15:4a:
                    28:81:d4:07:8f:25:50:fd:c3:7a:dc:5f:4d:41:07:
                    a8:13:c4:6e:eb:60:48:d3:33:8b:8c:b4:0e:13:be:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:2E:25:A3:FB:2A:F5:5F:47:35:40:92:AC:A6:A6:7E:AB:4E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1a5f88f8-e5ac-36ba-a6b8-2bea66a7ffbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:67:3d:01:96:cd:24:53:06:7a:69:56:73:64:6b:d3:a9:2b:
         c9:38:61:48:dd:c8:bd:46:12:3d:f1:e3:52:01:d7:cf:18:07:
         76:17:5b:d6:12:71:25:d7:e1:3d:b1:15:df:cc:62:a5:64:f4:
         63:76:5d:ef:d5:77:85:93:62:2e:39:48:7e:18:cd:fe:2e:c0:
         d1:ed:81:b6:97:20:cd:d8:e7:9d:00:2e:15:fa:80:8f:25:12:
         05:c5:28:2d:1d:66:dd:d5:18:3c:54:2a:bd:f9:09:1a:d3:27:
         57:85:64:e1:90:4c:6c:f8:a1:ff:b5:dd:d4:f5:35:21:3a:34:
         03:3f:b4:11:69:23:ba:1a:9a:d8:7b:5b:d1:5b:1e:1d:55:60:
         d7:93:0e:a1:04:f0:12:db:df:e2:74:37:66:bf:c6:7c:00:0a:
         b4:44:1b:da:24:99:be:60:a8:36:2c:44:85:49:1f:41:0e:92:
         90:92:7f:35:84:c1:bf:3c:14:e1:3d:b7:d7:df:c2:d2:af:62:
         27:a9:c7:b6:5d:f7:01:23:8f:16:16:14:9a:04:7f:5e:92:7d:
         ca:17:1d:ed:38:d0:de:be:07:8d:9c:c1:9c:02:6e:59:0f:1a:
         96:2b:cb:d8:e1:f5:c3:c8:39:e0:b3:5c:03:64:79:25:18:08:
         69:83:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:01:55 2025 by rpki-client