Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa
File:                     58789689-e2c9-3f72-af7b-00169d31da3d.roa (raw, json)
Hash identifier:          GwbC7BaVTp+Cmo9YqBP3kN3R5luBvVeeIXfDCdzWrJ4=
Subject key identifier:   72:A7:D5:D0:87:DB:8D:55:27:C4:B1:A5:25:85:60:65:DF:21:9B:45
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858482EBFFB12FE27628EFBFE2B70
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        143.244.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fb:12:fe:27:62:8e:fb:fe:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=35dfac27-0340-4883-b780-0411bd86e45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:43:81:94:84:60:63:d0:c6:ad:e8:a3:28:
                    97:5c:3b:03:08:3d:e8:69:2f:5f:98:19:0b:98:e8:
                    dd:f1:c4:90:24:ce:de:0a:2a:28:1f:94:c4:86:e7:
                    20:11:ac:5b:fc:8e:61:3a:6f:57:74:f1:60:01:5d:
                    17:4a:2f:ec:5a:3d:cd:d2:98:6e:99:1e:8b:c3:51:
                    bb:3d:43:19:ae:64:2a:f8:e0:9f:12:24:2d:b1:9e:
                    e4:48:75:9f:5b:37:19:db:9b:b8:d4:86:15:5c:78:
                    fd:ed:be:ed:f6:27:c1:5f:77:75:99:d2:9c:f0:79:
                    72:e1:23:bc:88:4f:9a:df:05:8d:e0:b0:cb:c6:b3:
                    fa:2b:0d:bf:0b:9e:9c:3b:77:a3:18:72:79:38:ac:
                    53:2d:f0:6b:6b:7c:d4:d6:a0:3c:05:05:81:9f:80:
                    08:4f:cf:74:06:bf:53:93:ec:97:03:1c:b5:cf:43:
                    07:a7:72:4a:18:9c:72:1c:89:94:be:f9:e3:01:05:
                    74:fd:20:a5:83:de:74:0c:7f:a4:28:49:f1:2e:ed:
                    31:d0:5a:fa:65:ea:96:76:a2:db:fe:52:41:35:47:
                    88:7d:59:20:b5:04:04:e4:12:34:dc:a7:30:2b:31:
                    17:21:69:3d:3f:6e:c9:bf:1d:ba:09:49:8e:85:46:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:D5:D0:87:DB:8D:55:27:C4:B1:A5:25:85:60:65:DF:21:9B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:cf:97:a1:af:be:81:60:81:69:60:f2:dd:74:8d:fc:c1:
         48:a7:b0:ae:0d:c6:04:f1:f7:86:b3:a4:35:36:49:96:a3:c6:
         46:58:01:2a:2c:14:0a:3d:2c:3e:2a:d3:9a:b9:c6:28:20:2a:
         5c:39:0e:72:af:4a:ac:f4:3c:5e:cf:30:a1:17:2f:13:49:78:
         e3:40:d6:15:3c:4c:ea:b6:81:c0:f0:3d:e8:e4:99:2c:ca:27:
         9a:e7:ba:cc:19:48:76:48:98:23:fb:31:25:f2:ea:56:a7:99:
         d5:01:63:dd:80:7d:d7:93:c3:6d:aa:97:b8:9c:b1:21:05:21:
         10:54:55:73:5b:7a:2d:ae:c5:1b:c1:d2:60:e0:57:dc:ce:eb:
         2d:87:5f:17:8e:fd:4c:6f:ee:88:13:15:58:90:84:0c:bc:e9:
         7d:47:02:97:f7:86:ff:38:79:23:7f:d0:82:d1:52:21:e6:bb:
         6d:68:2c:0c:9a:ae:52:54:46:d0:54:d0:ea:f1:4b:89:1e:69:
         b9:88:af:0a:f6:9d:95:d1:29:e9:20:d4:b3:72:28:c6:9c:e2:
         09:5c:b5:ee:ea:9c:37:f2:0f:b2:05:83:4c:5b:05:7d:47:2a:
         2e:d5:76:3c:7b:df:96:44:4b:6c:f1:a3:85:4b:94:49:c8:cc:
         de:3b:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:01 2025 by rpki-client