Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
File:                     5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json)
Hash identifier:          2riDm+48Mf43Mm6admy25VJSYm0JUHfbwi0NDnyzklo=
Subject key identifier:   54:B8:9A:64:A1:D3:EE:D2:1F:02:F1:7A:18:97:2C:CA:C3:DE:56:1A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA22F42ACD826DD9D75C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a2:2f:42:ac:d8:26:dd:9d:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=11ae696a-41ad-4c0f-923c-baa95a65ed3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:f9:26:04:ca:8b:c9:9f:38:25:7a:1a:c5:
                    c2:b9:88:74:1d:53:2c:b0:16:f1:10:ec:ff:b0:d8:
                    67:34:1f:ea:82:f1:2c:55:32:f0:bf:40:c2:70:bf:
                    8c:67:a2:71:db:d9:08:a6:31:71:bd:75:c1:55:01:
                    bf:77:fb:40:3f:4a:54:f6:e8:22:b1:63:b5:33:69:
                    3a:c6:7d:19:4b:39:9d:63:49:55:ad:69:da:0e:07:
                    9a:62:6a:45:95:2a:8b:03:5b:b2:c6:43:99:14:2c:
                    2d:ac:e5:31:99:84:db:75:de:32:62:d7:a8:57:92:
                    e4:e2:d8:64:64:d0:7c:5a:46:7c:ed:37:0b:fe:ed:
                    c4:c2:2c:da:bd:92:17:c2:a2:53:57:c4:19:67:f4:
                    f5:57:a1:c9:fd:82:80:25:91:17:00:ee:e2:36:60:
                    9e:5f:42:df:8a:03:ea:db:1e:58:b1:e5:93:2f:0a:
                    a7:00:22:e2:df:f0:e9:6b:c2:0d:f1:9d:b4:2e:91:
                    9a:40:d2:d5:8e:b5:82:ee:25:62:eb:bc:e5:ed:e4:
                    98:91:8a:77:f4:41:42:ad:b7:39:bc:e5:46:e9:59:
                    6d:a4:81:23:b9:31:77:7b:86:00:57:d6:ce:76:83:
                    7e:28:94:5c:cd:9f:cf:30:43:fd:7b:05:7e:5c:38:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:9A:64:A1:D3:EE:D2:1F:02:F1:7A:18:97:2C:CA:C3:DE:56:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:1e:d4:2c:d7:f6:85:9d:8c:c4:13:a6:7f:ad:a3:c0:50:
         ba:ac:21:7b:1d:3c:c5:a1:7f:ad:f9:03:d9:b7:e1:ac:38:4d:
         c9:bf:fd:32:fa:30:d6:59:b1:37:03:4a:c5:55:1a:c1:f7:4d:
         35:74:82:ff:51:94:00:e0:63:32:4f:a8:8f:93:d5:dc:ed:2c:
         28:04:43:6f:d1:b3:e1:5e:53:80:fe:75:3e:ac:47:57:3c:1a:
         ff:fb:95:ee:f2:6f:f9:27:93:90:3d:15:3c:a7:61:1a:72:92:
         32:37:f9:a1:ba:e3:32:a7:22:3c:12:c7:f9:c0:02:46:c9:29:
         4a:ea:b1:96:51:0a:b9:fb:2a:b3:6a:05:ed:31:48:16:35:85:
         4e:cb:0e:98:76:70:08:1a:33:34:a6:80:bb:03:e9:95:da:86:
         d4:b3:26:5c:ef:55:1b:45:75:ad:ef:eb:f0:45:60:c4:84:3f:
         d3:a7:61:44:82:10:64:4d:2d:36:98:66:83:7e:41:c1:6c:8e:
         17:cc:69:4d:67:7b:c5:f3:1b:90:26:8e:78:0e:d9:c5:95:4d:
         fe:90:9b:a5:5a:9a:3c:b6:3f:28:b5:a7:73:af:4b:52:65:ac:
         4f:1a:f6:14:b0:48:e6:52:25:f8:b5:c5:b2:17:b4:83:d6:77:
         bc:85:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:06 2025 by rpki-client