Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa
File:                     3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa (raw, json)
Hash identifier:          DpZ+3wtRXxcYmAUPMj59EHYoXRdoX93Qj7ZPgIDXr8M=
Subject key identifier:   76:28:DA:73:60:78:36:6D:FF:54:55:E3:F2:39:A0:73:B6:F1:47:17
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584812D52A483F291ECF3DD17D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     396955
IP address blocks:        163.253.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2a:48:3f:29:1e:cf:3d:d1:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=6b36150f-fe04-4d6d-a3a4-d638c8e24a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:ca:09:94:b3:a0:ea:49:00:e7:3f:98:e7:
                    7c:b8:66:29:c6:4c:3a:ce:1b:b6:b3:f0:97:da:e0:
                    34:72:d6:dd:20:db:62:32:d8:e8:55:ff:a1:f5:2f:
                    03:be:bb:b7:e7:33:51:73:65:4a:23:d2:06:b5:08:
                    8e:1a:c4:a4:df:38:f0:7d:13:4e:14:49:fa:4e:35:
                    f4:b0:1e:9c:b6:77:3a:1f:c6:8a:89:70:53:ce:d4:
                    5b:9a:c3:80:fb:82:98:f8:76:e6:5e:0c:68:38:ae:
                    07:3c:0c:b4:52:87:78:40:04:73:90:cb:2f:81:9f:
                    a2:26:3d:d0:a3:d6:b1:6f:31:50:ea:1e:86:9d:ab:
                    59:31:6c:56:88:a4:21:3e:cf:e5:88:d7:0b:20:28:
                    db:7e:c7:01:80:c2:9d:ac:5b:c8:9e:76:f7:db:0b:
                    83:8a:e9:9e:24:87:12:4c:06:a1:90:14:ea:dc:8f:
                    81:48:38:fa:4a:54:79:89:4f:13:7b:f6:ac:ee:73:
                    17:00:d8:f8:ba:2a:9c:71:f5:43:c8:d3:64:d2:2f:
                    a5:a9:35:c8:c5:74:91:c8:4d:48:4b:9e:c5:b5:7b:
                    1a:90:ff:cc:c3:c3:96:0e:a1:c5:a9:c2:7c:97:87:
                    30:37:38:09:2e:a0:68:30:d8:e3:02:96:15:ca:5b:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:DA:73:60:78:36:6D:FF:54:55:E3:F2:39:A0:73:B6:F1:47:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:6d:c1:bc:f8:a9:86:e7:a1:1e:7d:37:2c:24:6f:a3:0a:4f:
         4b:69:67:f3:2f:7b:cb:76:1b:b7:a8:0d:82:b9:57:01:99:1b:
         db:4f:a2:88:85:d7:1c:8a:11:cb:9a:d7:7e:5f:85:80:24:dd:
         db:7e:0b:05:bb:b8:66:18:ae:69:4b:2d:2d:86:4b:94:02:8b:
         e6:48:58:67:c6:38:95:54:58:a9:73:6c:73:23:b1:41:a4:fb:
         91:fe:54:64:a1:32:41:f6:af:a5:3c:72:1d:e5:e9:66:4a:70:
         99:60:00:20:e3:11:be:53:3e:c5:bd:da:eb:f7:e3:cf:51:be:
         09:8f:66:09:7f:c2:f0:b0:6f:13:62:7c:69:cc:00:d6:c9:48:
         b0:37:2e:4a:a3:57:b5:0d:a8:87:ee:93:75:fe:ec:a0:bf:34:
         47:df:28:df:3b:70:ba:95:b7:9b:09:55:8a:ec:42:40:95:58:
         46:dd:2e:2f:c1:79:0b:96:57:c7:1b:23:cd:60:4c:90:0d:39:
         dd:1f:b3:31:d1:83:34:0a:56:af:b3:01:7f:3a:1c:b8:52:f9:
         ab:d8:a8:38:92:66:7d:25:87:2c:39:a0:d7:df:e9:41:04:62:
         ce:58:c5:c4:00:d5:e9:52:e2:be:0d:f8:a3:04:68:52:f3:f5:
         e2:5e:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:00 2025 by rpki-client