Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa
File:                     7fa946ff-2576-3c20-a017-5633e6ef2732.roa (raw, json)
Hash identifier:          PaRQ+96y5wEvFYBhDYfmbXoa5lYweItbd/gwQUSZxrU=
Subject key identifier:   7C:CA:5E:5F:42:91:CA:07:0A:FE:FF:DA:C2:62:34:6C:8C:04:FB:7E
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F43285848318AA979197AA2288DBB6D00
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     14618
IP address blocks:        165.125.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:a9:79:19:7a:a2:28:8d:bb:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=766271a3-3338-4f0b-8688-a6d31cd98c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:73:3b:a6:71:cc:35:4e:c3:03:67:09:b5:
                    9f:21:3a:77:36:45:9b:17:cd:7e:62:e6:05:66:93:
                    26:f3:94:22:b4:9d:f1:ff:d1:04:57:77:36:ed:ef:
                    e3:d7:3a:49:79:20:14:4d:35:d4:aa:79:d7:35:bf:
                    dd:47:ca:af:c7:28:57:d2:06:23:42:be:79:f9:8e:
                    54:01:c2:64:f9:ad:44:36:f2:2b:56:c6:cb:7c:7a:
                    e2:fc:79:44:95:bc:98:7b:8a:b3:51:21:2b:df:84:
                    32:82:84:b5:e9:c1:b1:3a:59:b1:72:d5:11:25:c0:
                    9a:42:48:ac:86:68:b7:46:e7:3d:05:be:29:58:e0:
                    89:78:e2:4b:d1:67:72:f8:cc:88:af:00:f7:2e:b5:
                    40:dd:80:ac:a7:3c:23:b6:a2:9d:bb:c0:5d:2e:65:
                    1a:7f:e5:43:22:70:63:2d:7e:36:17:11:48:ca:a7:
                    b5:e7:2c:07:ef:4d:3b:a5:df:8c:e3:66:99:93:0f:
                    8f:3d:66:08:55:93:6c:2a:b4:c7:ad:9f:1d:b6:4e:
                    7d:76:1f:d3:44:2d:a4:59:c3:a1:74:44:48:b7:3e:
                    db:f3:36:12:22:ea:47:bf:a9:49:b7:1c:6f:b1:78:
                    87:99:a8:7a:68:41:fc:72:a6:ad:32:db:7f:eb:3d:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:5E:5F:42:91:CA:07:0A:FE:FF:DA:C2:62:34:6C:8C:04:FB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:26:4e:b0:57:f7:d7:be:bc:16:a3:fb:c4:9f:59:90:25:
         18:b3:9c:85:c9:a8:bb:cc:e6:7f:17:1a:99:80:74:b2:fe:39:
         01:ec:fe:d6:2d:b4:e7:50:5c:9a:44:90:4d:8d:b1:70:da:00:
         d8:3e:a8:74:b9:db:a1:ff:64:8e:72:8e:77:ee:cf:df:11:a3:
         26:39:07:12:7b:da:ba:56:6b:9b:65:b0:52:2c:1d:48:16:56:
         e9:ec:07:fe:13:a6:b1:f2:c2:4b:84:f5:19:dd:e9:7a:c9:6c:
         49:74:84:b9:82:e0:56:78:07:92:b1:40:e7:df:a9:f6:f1:b3:
         1d:e1:02:70:0a:3a:c2:34:dc:12:bb:05:df:86:4c:f7:6d:0a:
         73:f3:15:1b:52:4f:92:d2:80:bc:15:63:3c:38:bf:e4:87:24:
         1f:4f:39:0e:f5:76:4c:e2:bd:31:27:7a:a8:f8:75:0e:4d:82:
         f2:73:d6:84:2d:ce:8f:49:76:5a:af:23:f4:72:c8:91:45:69:
         a8:29:45:08:3a:c9:7c:ca:a3:49:e0:75:35:92:a1:eb:a3:ef:
         1b:ba:e6:8d:1f:cd:90:c0:2a:db:55:64:8f:79:7f:de:6c:28:
         ea:cf:57:a7:d3:d4:e8:62:75:73:77:56:5a:95:04:33:86:b9:
         97:b9:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:56 2025 by rpki-client