Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa
File:                     dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa (raw, json)
Hash identifier:          14nSwAftEqySK8a2rO0SzJd4GWG72DAnn6AyCbM4U8c=
Subject key identifier:   A7:6B:6B:DD:24:88:C9:8F:24:17:F5:27:9A:68:AA:32:57:95:5A:1C
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285847F84F7A81FBF0A2D66542F870
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     32870
IP address blocks:        136.147.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7a:81:fb:f0:a2:d6:65:42:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=18320fa8-cc48-4dde-8f66-7cbd3b04756d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:f0:df:aa:50:15:fe:40:71:3e:bd:cb:35:
                    0f:8c:8c:d4:d8:d7:8e:39:e1:3e:b6:5d:9a:38:0c:
                    e2:5e:ff:32:94:80:0e:3f:75:4c:30:12:f1:c9:cf:
                    f3:33:a4:a1:ef:f9:91:87:d9:0a:ee:94:3b:8e:cb:
                    23:e8:83:86:06:c7:8b:c8:d7:5f:ad:fb:62:82:16:
                    58:22:e9:f8:96:59:ae:3c:6b:c2:b1:4a:b6:25:3e:
                    6d:7d:15:ca:74:22:ab:91:5e:52:64:40:7a:0a:e1:
                    df:4c:29:64:2f:e5:21:1d:91:0c:f7:45:74:f0:9e:
                    7b:a6:43:12:51:c5:69:01:9b:80:78:36:2e:03:8c:
                    ce:b9:dd:cd:e3:cd:f2:3a:84:d7:04:73:79:c6:af:
                    c3:7e:1b:03:ea:06:d9:6f:0d:52:cc:38:51:f8:01:
                    df:a8:a1:2a:49:7b:90:72:3c:e0:d0:9e:85:c5:76:
                    fe:64:d8:ee:a1:0b:33:63:f4:9a:8e:d4:98:3d:5a:
                    01:f4:84:e1:eb:9b:73:6c:84:73:df:b1:4b:83:43:
                    b2:b8:e5:77:74:6f:8d:62:74:4e:80:cf:db:a7:50:
                    ba:ac:34:56:03:68:5c:0f:fb:b8:85:43:b2:f9:b2:
                    e1:71:7f:9c:94:59:83:dd:bb:b0:26:8f:cf:fd:3f:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6B:6B:DD:24:88:C9:8F:24:17:F5:27:9A:68:AA:32:57:95:5A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.147.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:70:dc:ed:f6:4b:09:98:13:12:dd:9c:39:40:16:71:2d:c1:
         f8:69:3a:f4:f9:53:b7:01:a3:92:14:ba:da:74:4c:31:b3:a3:
         d3:1e:9c:3e:9b:de:e3:47:7d:d0:34:2b:17:e2:b9:12:11:82:
         f3:b3:ec:80:20:e6:e2:60:c7:8b:f9:fd:cd:8c:03:86:dc:bd:
         ca:9a:d5:f3:61:8e:db:bb:31:83:aa:49:c9:89:89:64:44:12:
         f3:a2:74:31:e4:69:26:93:09:84:8b:21:1c:4b:b5:9b:49:da:
         fb:e9:12:d2:ca:c4:78:89:f0:7a:3e:3b:6b:ee:6c:96:fc:8e:
         56:67:f1:96:26:6c:f9:8d:1c:9d:7a:81:d7:cb:00:0f:3b:5a:
         45:f4:b1:b1:a0:3e:2a:29:46:10:41:5a:ef:2e:78:00:1b:60:
         6b:85:fb:23:94:de:1f:23:3a:6d:3a:cf:16:15:2b:e2:62:a2:
         96:bf:6b:10:4c:fb:4b:e8:49:af:33:c0:16:9a:3b:ab:89:62:
         b2:96:56:56:70:e2:9b:1c:19:aa:13:5d:5f:bc:6a:62:81:a3:
         62:62:62:97:5d:a7:5b:e4:9f:ad:5d:bc:13:d8:2f:7e:8e:5a:
         32:05:07:fa:db:95:74:1a:8c:87:bc:3c:c0:13:f6:7a:25:fb:
         4f:4d:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:41 2025 by rpki-client