Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
File:                     ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa (raw, json)
Hash identifier:          hR36/W88JGr48ZYMHNuB00LNyI6VY9bzx/epwe36u6g=
Subject key identifier:   59:37:EF:0F:24:2C:EC:BD:59:D4:82:6E:A0:8C:AF:D2:E3:A7:28:A7
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858483F802AFE886011CA74251380
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     174
IP address blocks:        65.160.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2a:fe:88:60:11:ca:74:25:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=f7e1f13e-6c06-461b-882b-cc2fe96f86c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:87:2f:82:52:0a:de:c1:76:b5:9e:f6:c4:
                    26:91:a7:69:8c:4a:f2:dd:9c:fe:44:8c:08:37:6d:
                    46:af:8a:08:09:4d:75:37:cd:f4:46:70:df:ad:f2:
                    32:a3:ae:e7:1a:46:70:3b:6d:2f:8c:f6:69:3a:7c:
                    41:6a:cd:66:1d:3d:3c:d4:96:3c:63:df:e2:7f:80:
                    fe:d9:d0:8b:ce:bb:3b:a2:a8:2a:3f:5a:02:d1:1f:
                    a6:15:7f:e2:d7:9c:4b:fa:3e:d1:81:ee:d9:87:7a:
                    d2:37:08:37:11:08:72:eb:f4:d8:19:94:f8:7b:6a:
                    d0:8c:65:fe:85:88:7c:45:89:91:78:a2:cf:93:08:
                    21:7e:30:64:51:3c:d6:77:6d:c3:c2:fa:97:92:ea:
                    ea:1b:1f:59:90:37:8b:aa:90:24:42:8d:fc:95:85:
                    c2:a9:e5:26:99:41:72:af:f2:22:70:2f:3b:70:4c:
                    ec:b5:bf:ef:fd:f4:12:9f:2c:c9:cc:cd:4e:b1:bb:
                    f8:90:75:c9:cb:4f:9a:b7:9b:fe:cd:7a:52:7f:ba:
                    02:65:d2:be:23:48:0f:71:61:1f:e0:98:34:96:9f:
                    a2:c3:f7:e9:84:49:bb:23:a0:75:66:10:37:26:a1:
                    be:9d:a5:a2:9b:b9:06:32:ff:85:06:51:15:ef:02:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:37:EF:0F:24:2C:EC:BD:59:D4:82:6E:A0:8C:AF:D2:E3:A7:28:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:ac:07:41:a7:e3:ff:be:0a:85:94:dd:55:d7:aa:2d:4a:
         e8:c0:46:80:12:57:bb:76:bd:32:7b:e7:89:b9:b1:04:f6:2c:
         da:c9:b0:6e:00:60:e8:e4:97:27:ae:9e:f6:3a:17:24:0b:4d:
         c8:70:42:5e:bb:07:6f:48:31:66:63:ae:f7:04:82:05:df:1d:
         c3:08:f8:0e:97:64:62:21:fc:92:1c:26:a5:e8:d9:40:32:17:
         9f:e8:42:65:e9:16:20:08:ed:d9:f1:40:20:9d:7a:5f:be:47:
         27:a1:94:3f:49:18:04:61:53:21:31:e6:f3:a0:d4:26:49:03:
         a0:60:c3:23:4e:b7:e9:72:9f:23:41:63:f1:ff:38:f2:aa:29:
         1c:75:a4:73:f3:58:67:1b:fc:cc:e4:9b:17:34:74:11:64:99:
         64:66:fa:fe:8e:b6:38:d3:25:2f:cd:e9:e4:83:a9:32:88:34:
         c9:dc:a8:9b:fb:c5:0e:aa:67:74:62:9f:94:5d:b0:06:46:6c:
         4c:53:d3:4d:db:70:52:d6:84:fd:45:29:b8:ff:7f:2f:bd:36:
         8a:de:d4:c9:c6:6d:d9:12:aa:5b:36:14:60:fb:58:8c:e7:db:
         4c:31:da:2a:dc:db:65:e7:e2:9a:31:e2:22:9b:82:10:5f:03:
         a9:c1:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:12 2025 by rpki-client