Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/38027ada-ac68-3d26-877f-77722fdca115.roa
File:                     38027ada-ac68-3d26-877f-77722fdca115.roa (raw, json)
Hash identifier:          5j6c05lRWzyMOapGlehMuioUb/MR+GlHoGbO/nwjOLU=
Subject key identifier:   30:08:47:DD:42:1D:37:7C:1C:B8:0F:00:E3:17:0E:80:6F:BE:CB:B0
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584827C531F75043769C5350E342
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/38027ada-ac68-3d26-877f-77722fdca115.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        139.180.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:31:f7:50:43:76:9c:53:50:e3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=a67aefbf-2ffc-42b3-a833-3fdece6ba3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:af:ad:8a:47:c4:41:2b:54:b0:49:7c:5e:
                    9e:8c:74:8f:62:b7:19:78:a7:f8:4a:05:54:0b:ae:
                    28:d7:57:36:32:4c:dc:fc:7c:e7:08:b4:62:67:b0:
                    1e:df:56:11:2c:00:89:e5:9c:a2:4f:d7:68:02:a0:
                    3e:09:35:92:7e:4d:e4:7d:dc:7d:9b:67:19:6e:af:
                    09:88:d2:aa:e8:25:a6:f0:cf:d1:ef:02:58:75:42:
                    92:9b:df:b1:e8:52:c0:cf:93:89:56:f2:17:ee:07:
                    cd:41:db:21:56:3b:f1:33:2e:bc:92:79:7a:cc:38:
                    da:35:be:84:bf:0b:49:12:50:d6:8b:13:ef:4f:f3:
                    6a:15:01:65:ca:94:21:4a:f1:e8:56:63:9a:f4:13:
                    cd:cd:46:4a:d4:7b:14:c8:20:d1:3c:1c:05:09:ce:
                    3e:13:64:42:58:f7:b0:a5:97:5e:06:0c:67:4b:9f:
                    5f:13:91:9c:7e:cf:10:21:1c:87:61:68:20:7c:69:
                    22:93:b4:95:96:3c:16:b0:73:25:15:bc:55:d8:b4:
                    f4:fb:2f:92:51:8c:d6:69:fa:9f:9e:f7:39:70:cd:
                    33:e3:c2:f7:2f:ed:c6:fb:5f:07:f9:3d:b8:9d:d9:
                    58:52:4c:3d:87:89:69:38:8e:82:3c:63:c0:bb:8f:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:08:47:DD:42:1D:37:7C:1C:B8:0F:00:E3:17:0E:80:6F:BE:CB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/38027ada-ac68-3d26-877f-77722fdca115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:28:c2:6a:97:5c:11:29:d0:f0:be:09:fb:7d:d0:6b:48:8e:
         7d:a7:b6:a0:1f:6c:36:67:52:bb:67:16:32:20:b9:30:85:26:
         b2:eb:9c:82:db:0d:57:49:78:91:a8:88:e0:82:72:30:5a:34:
         b7:73:1c:bf:74:9a:50:c6:35:67:75:18:5d:22:2e:e3:2a:a5:
         1d:69:bf:2f:88:2c:64:84:3b:70:0d:6e:ee:c3:c9:92:fd:22:
         57:45:69:6d:e8:69:aa:08:21:9c:07:c4:16:96:91:a6:88:ff:
         07:a4:7b:bf:8c:cb:06:bc:46:c2:54:11:97:0d:f4:f4:1a:ec:
         a3:12:60:df:fe:24:40:5a:9a:9c:b2:7a:bc:a8:67:59:5f:75:
         64:5a:d4:be:55:a5:c8:ab:e2:59:b2:00:25:f7:4f:fb:4c:c8:
         30:75:43:7e:91:f2:11:3d:26:be:6d:85:1e:17:bd:d5:2f:1c:
         58:34:c4:f8:2d:73:0c:65:df:cd:01:71:f2:30:d4:8e:a8:c4:
         8a:62:5f:55:31:6a:b0:84:7c:28:7e:ff:85:5f:91:d8:22:17:
         32:82:2c:72:ea:34:36:b8:47:67:4d:ca:08:af:be:3e:ae:79:
         f9:a3:d8:bd:0e:36:26:e5:30:71:6a:77:d5:1a:4a:e7:8a:b1:
         b2:44:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:00 2025 by rpki-client