Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
File:                     bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa (raw, json)
Hash identifier:          4yW27L7b5t6qvZhabu1KYIH14m1BdND3VGtQXG0bBmU=
Subject key identifier:   95:5E:FC:41:98:43:20:AD:68:E0:AF:4D:01:C4:A4:4D:D5:D8:82:BB
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858483720177098F0F9479BE77880
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     237
IP address blocks:        35.62.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:17:70:98:f0:f9:47:9b:e7:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=6ef3e06b-51b0-40b8-b928-db9ac60af3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:43:44:93:c2:26:ae:06:6b:d0:a0:ef:39:
                    ee:8f:d5:14:ff:aa:52:85:08:e2:a6:1a:ae:57:ac:
                    0e:dc:d8:a2:ce:c4:c6:8f:16:20:e6:d7:0a:50:42:
                    6f:aa:c7:f1:c9:a4:71:c7:1b:e6:b9:1e:df:b5:1f:
                    bc:4e:ba:d2:9f:f7:66:ab:88:33:5e:20:28:a7:b8:
                    cf:fa:4e:f3:1f:e0:3f:d4:90:97:f5:67:9e:6c:17:
                    b0:18:5e:4c:ed:ff:89:08:fc:aa:bd:3b:5d:9a:89:
                    6a:ed:d8:dc:5d:c3:28:f8:90:3a:29:db:29:4c:76:
                    9c:a3:91:6e:09:56:1d:ac:4c:b2:1c:e7:b3:e2:03:
                    2f:d8:b2:83:9f:1e:3a:89:82:09:e4:df:f5:7b:0d:
                    08:d2:d0:a6:08:2a:aa:c7:67:69:ba:19:c9:be:64:
                    68:59:b1:11:91:29:25:2b:e1:07:5b:59:7c:70:b9:
                    2e:67:82:67:5e:f1:f3:d7:9e:6e:c9:26:d1:fb:30:
                    98:6e:d6:b5:33:c5:5e:05:53:2d:4a:93:e0:96:5f:
                    8e:c8:1d:80:a8:c1:fc:cc:53:ff:b0:c7:fb:45:2c:
                    aa:52:7a:6d:68:d3:37:70:6d:fd:ba:bf:98:cf:06:
                    9d:34:e4:4c:a6:71:10:ce:c7:98:3f:f0:13:0e:56:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:FC:41:98:43:20:AD:68:E0:AF:4D:01:C4:A4:4D:D5:D8:82:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:3e:4d:7e:57:a1:cb:90:bd:34:d7:ad:21:3d:6c:68:29:
         ed:df:a8:84:56:25:bb:24:ff:0e:bf:3e:4b:9d:9d:27:66:a8:
         45:9c:59:4b:7f:8e:0f:31:dc:ea:c0:5c:b4:28:df:87:60:08:
         5b:cf:cb:e8:87:d6:27:1a:7f:2a:38:84:aa:39:d0:cd:13:b0:
         98:91:f6:97:a6:06:26:c8:0b:f3:37:b5:02:90:a3:f9:0c:2f:
         a1:5e:70:b7:14:ca:7e:00:cb:af:92:18:d8:0e:80:ab:d4:f0:
         1d:26:22:b9:2e:ce:51:89:02:64:2f:28:45:5c:9f:f7:28:fc:
         b4:2b:78:95:60:1c:bc:0d:ed:ff:00:ca:e3:bc:1d:0c:21:ee:
         ea:b4:f4:62:51:da:b3:68:f1:8f:49:fb:bc:e0:cc:37:44:ab:
         97:df:1b:df:27:9b:d9:be:10:0d:09:f9:b8:a5:11:ec:e4:39:
         3d:b2:0b:10:62:d5:9a:e3:e3:36:c9:7e:8f:e8:02:f7:c8:40:
         9b:09:97:1f:e7:6d:ff:6a:82:98:73:78:ff:6b:97:21:70:29:
         6c:f0:7e:d0:22:71:6d:7a:61:b1:d7:b5:56:9e:c9:95:96:db:
         b9:82:52:26:a0:0d:11:f0:83:79:ef:ad:e6:2b:ff:77:be:fd:
         eb:27:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:19 2025 by rpki-client