Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
File:                     ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json)
Hash identifier:          cf77mEQyvJoJddtgPwUH8LehONB6Z2JbOjXIbDKXwfQ=
Subject key identifier:   1D:84:13:51:4F:CD:F8:C4:BF:35:26:41:14:19:7E:A4:36:BC:FA:13
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F43285847FF4A4BED6F154C0D9C1BC600
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     14977
IP address blocks:        137.88.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4b:ed:6f:15:4c:0d:9c:1b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=8be308d9-963c-4fd4-b7e3-611a4d6f7032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:86:e8:36:35:cd:57:8a:d5:e8:ca:51:1d:
                    a9:3e:ea:3b:47:04:08:54:5b:4d:27:96:61:8d:56:
                    81:f5:3f:ee:fa:c3:33:90:32:a5:3d:b8:7f:98:ca:
                    51:65:eb:a3:8a:13:d7:75:19:6e:09:55:79:14:0e:
                    57:c3:0d:cf:25:e1:59:9f:d0:b8:ae:02:32:1d:89:
                    f7:38:91:15:61:e0:3b:88:ee:65:85:e6:df:81:91:
                    f8:aa:6e:a2:01:f2:ae:ef:26:7e:72:69:5e:93:40:
                    ef:68:35:e4:65:af:f9:61:ea:91:6b:ae:4b:2e:6c:
                    40:e1:00:dd:6c:25:40:d1:f5:db:b1:d5:0c:29:e3:
                    e1:c3:70:a5:70:1e:8a:f4:63:18:60:da:0c:c8:7c:
                    a8:4a:7c:50:78:e9:47:31:60:58:92:28:e2:8e:69:
                    94:c8:9e:2b:e8:bb:9b:78:7c:a2:88:dd:7a:33:c8:
                    32:db:72:c1:7d:c3:8a:5c:4f:f2:af:f2:f2:d7:82:
                    0c:d8:32:88:75:ae:36:24:9a:c3:42:c1:11:7b:70:
                    d5:2e:11:f7:f7:38:a2:4b:bd:1a:a6:09:21:52:ba:
                    2d:b0:3a:69:d8:ec:07:ee:fe:ef:b4:94:96:c4:21:
                    83:5f:a4:fc:21:e9:70:db:16:03:30:3f:a5:a9:38:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:84:13:51:4F:CD:F8:C4:BF:35:26:41:14:19:7E:A4:36:BC:FA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:50:07:77:65:a4:52:34:b7:60:df:4f:23:1a:a7:e0:8a:
         ca:03:53:19:f8:8a:28:c0:08:88:bf:66:fe:da:c6:8d:54:98:
         26:09:7e:9c:51:fd:0e:de:b8:09:68:46:56:ba:16:18:17:75:
         34:8c:5a:42:f5:5e:c6:66:93:ea:d7:5b:8f:be:ab:72:06:ab:
         0d:af:14:18:b2:70:65:4f:ab:90:43:c9:15:39:e6:3d:7a:13:
         a5:84:91:3b:0b:b2:13:8c:c1:8e:08:06:d2:ec:15:0d:f6:a3:
         81:ad:9b:06:c9:b1:d3:9c:ca:14:ab:08:77:20:8e:a2:de:0f:
         06:10:89:d2:17:56:1f:bd:c3:ed:11:f5:f2:47:36:b2:89:eb:
         56:8a:27:02:1e:c3:5a:a1:e7:d4:d2:5a:c7:bc:e7:28:b1:09:
         bf:00:5d:c5:e6:33:f7:7b:41:87:85:c0:30:7e:ca:28:38:58:
         ce:36:d8:3c:82:c5:39:23:ff:ec:c9:8f:53:e6:75:00:be:14:
         4f:30:3a:64:a0:24:67:df:a4:74:3d:46:1e:aa:fa:94:53:b0:
         23:60:5c:a8:b5:22:14:78:04:89:84:9b:91:76:77:c3:2e:47:
         03:39:0d:bc:a8:2f:e0:c9:a6:3b:6e:90:a1:8d:f3:26:54:9d:
         48:d1:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:18 2025 by rpki-client