Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa
File:                     487efafd-1d25-3ab6-ace5-2da718338232.roa (raw, json)
Hash identifier:          XA3A/n32fIoOB7HB8KvnIzn9jnw86y+my+x0U15WOWo=
Subject key identifier:   75:45:E0:B7:2E:12:48:2E:BA:C0:84:49:A8:8E:04:5D:4B:31:09:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485B6B0ACA17D860B2AA6D3B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        209.131.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:0a:ca:17:d8:60:b2:aa:6d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=7710605c-b812-4c76-b1af-ed832793d24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:fe:a0:b8:0a:d9:16:6a:a7:01:7e:58:b0:
                    f9:28:0d:ab:19:c4:41:28:e7:df:57:f6:9b:23:36:
                    d9:51:c2:3a:77:82:7d:a0:52:5f:56:b8:4a:c6:61:
                    23:b9:04:0d:c1:50:21:9c:19:3d:c3:64:0d:f0:3c:
                    c3:64:d5:68:be:f9:23:b4:3b:5f:ab:a5:27:85:f5:
                    5d:4b:68:40:92:c3:d2:cb:67:bc:e6:04:0e:94:80:
                    ee:82:d0:17:6d:c0:63:b7:c3:99:04:86:61:a6:0a:
                    98:c5:3e:19:99:73:d4:0b:49:c2:3b:29:6b:94:63:
                    0b:34:4e:a5:77:a9:a1:71:ae:de:42:b6:1c:c2:29:
                    83:b3:64:45:a9:e6:43:4c:92:70:8a:5b:09:03:93:
                    2a:c2:59:69:4f:52:20:84:75:98:0b:a4:cd:fa:27:
                    7f:a6:35:f4:d6:16:b9:8f:f8:f3:db:fd:4d:0a:6f:
                    71:3b:80:5a:d8:a4:2f:61:f8:0e:79:16:91:02:3e:
                    ca:49:43:14:de:22:81:c1:18:5c:d8:a2:80:d9:d8:
                    88:8e:a4:cd:80:fa:e9:7c:81:15:17:8c:9a:f6:a5:
                    67:dd:b0:43:4f:c4:61:63:04:aa:3f:6c:6f:a3:74:
                    ac:a2:c4:ba:22:23:70:19:93:25:f3:04:11:f0:27:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:E0:B7:2E:12:48:2E:BA:C0:84:49:A8:8E:04:5D:4B:31:09:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:53:59:bb:e0:95:36:61:92:69:d6:41:40:4d:a8:49:bc:
         cd:ae:59:2f:cd:fd:f5:86:f4:d7:5f:13:0d:f2:af:35:a7:8c:
         98:de:1c:2c:29:22:a5:81:a8:73:d7:2c:5f:31:75:f2:35:3a:
         f0:f4:84:4b:87:e1:ca:c1:7f:46:95:f2:3d:db:d0:54:97:d7:
         55:1d:fb:52:c0:dc:73:c9:d2:2d:62:2c:55:b8:e3:c0:31:4b:
         36:05:d5:e1:5e:7f:1e:4a:a1:44:a5:c2:2b:f2:f4:3c:3e:18:
         f7:ab:40:a5:d3:09:63:bf:4b:4a:38:ea:de:93:c9:80:a8:05:
         ab:1f:52:3b:17:c7:b1:95:7d:d2:eb:a2:2d:55:2e:b7:d7:2a:
         4d:67:9e:7c:4c:f4:ee:a4:9e:25:8e:d7:f3:10:e2:0b:ad:9a:
         b2:a2:8e:1a:94:74:d1:b6:17:2c:6b:23:1d:bc:c3:c6:82:5e:
         86:46:88:42:22:42:73:48:9f:bb:97:bf:64:ab:7c:7e:09:12:
         3b:a4:5b:84:e5:f1:b9:59:5c:81:d7:47:47:98:b2:55:0f:82:
         69:d5:09:89:59:e6:d7:37:e7:f7:21:d8:ec:81:70:d9:97:39:
         a7:c8:5b:dd:d5:11:ef:23:7a:2a:f6:40:09:8c:0e:8b:27:5e:
         5e:8f:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:29 2025 by rpki-client