Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
File:                     26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa (raw, json)
Hash identifier:          vAz8ZMAIFSvZv0lhA1EJBM7MV8D1XhovhpWZrLWpUy4=
Subject key identifier:   1C:72:C9:94:38:57:17:6A:8B:00:34:EB:91:88:D8:BB:35:02:A1:2C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584830253E321E48CA4832E08380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3e:32:1e:48:ca:48:32:e0:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=7c3f335f-777f-4c3d-a9d3-d438438304bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:bf:c9:fd:6c:d4:4c:b2:d8:5b:6a:2e:ff:
                    76:ac:b5:89:11:ab:47:46:c1:62:04:9c:a7:30:e9:
                    df:8a:d4:c7:09:95:6b:17:1c:19:83:d8:6a:39:9f:
                    25:02:fe:a8:83:23:05:3d:e9:f2:52:d1:36:be:52:
                    ba:01:17:e3:1d:7f:ca:59:58:03:23:60:a9:df:ed:
                    95:e5:f4:15:84:10:63:09:91:8a:9e:42:97:b9:8c:
                    65:54:c5:5f:a9:be:cd:be:0b:04:e6:23:b3:56:0f:
                    7a:51:de:3a:2b:83:f1:15:03:d8:cc:1b:40:10:12:
                    ca:93:17:4d:2d:a7:5e:43:0b:23:09:f3:0e:a2:24:
                    cc:58:40:ec:fc:d4:e9:69:fe:e0:8f:ce:f8:a2:a6:
                    94:0a:78:4b:ec:a0:be:35:6d:21:dd:51:76:47:3d:
                    7c:74:af:27:0c:29:0a:11:6e:47:fc:e3:f9:1c:ea:
                    d0:6f:bf:5f:37:a7:68:43:be:47:1a:31:cb:a0:02:
                    c1:75:fd:f4:5d:b4:09:7b:89:b5:87:89:ba:3a:42:
                    74:f3:8d:1f:18:65:2e:2a:23:5f:2d:10:07:18:5e:
                    ee:4d:e4:e5:76:15:d1:ab:e0:d4:03:76:23:40:a2:
                    b2:e2:5a:e5:80:74:c6:bc:04:4e:87:d9:84:3c:22:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:C9:94:38:57:17:6A:8B:00:34:EB:91:88:D8:BB:35:02:A1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:41:18:c9:69:67:9f:87:d0:a8:18:cd:cf:4a:4a:54:d7:
         1b:77:0b:f4:c3:87:97:8c:41:e8:5f:e8:52:c3:a7:15:ce:63:
         87:e1:8d:67:53:19:e8:10:9e:44:1a:8f:6a:df:ff:ae:c0:b8:
         40:88:4c:a9:0c:fc:51:82:7f:74:1d:e7:49:e1:e6:7f:8f:02:
         6c:ad:b3:b0:7b:d3:10:f7:5c:a8:aa:60:23:28:4f:49:91:72:
         95:e9:49:02:c8:58:76:f2:3b:c7:95:0e:b5:6f:1c:8b:f2:81:
         05:7b:42:bb:ad:9b:03:98:60:bc:16:92:72:ac:20:1c:69:b0:
         b3:ad:1b:1e:1f:e3:ac:f6:c6:c0:1d:d6:64:45:bf:8a:fe:c1:
         c6:f3:63:23:41:21:4e:44:86:94:91:18:77:3a:df:9b:69:b0:
         c7:55:d1:80:c8:89:89:fc:83:ad:96:bc:75:83:c8:28:76:d4:
         41:95:be:b9:77:10:45:c5:c3:1f:78:91:1e:1f:f6:57:7b:12:
         78:fb:5b:75:c1:6e:b3:e8:94:a9:89:69:f0:28:77:af:0c:bd:
         8a:7a:f4:df:96:50:56:b1:59:2f:a1:ee:69:98:67:b6:9f:b8:
         79:c3:b3:88:0b:c4:f1:df:0e:bf:5e:a3:d2:9e:11:b8:d0:ab:
         9a:c0:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:52:27 2025 by rpki-client