Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa
File:                     68ccd104-83c1-30ed-ba92-df713566a706.roa (raw, json)
Hash identifier:          0Azqr7928i8GIxX4PK5GbLezHFl6kRW8Lp7rT5NanVg=
Subject key identifier:   BF:33:D4:47:93:21:A0:AE:CD:66:B9:5E:24:CA:A5:F9:91:F6:7D:FB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847EBBF86E963FA8E08F24C07D0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        150.48.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:86:e9:63:fa:8e:08:f2:4c:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=de74f787-466c-40c4-a943-1c9b3f10b3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:3d:5e:34:3f:ac:90:9a:35:42:53:d0:62:
                    02:9b:f9:36:d0:44:d7:3d:4d:c7:4f:08:c1:b7:3a:
                    b6:70:4d:d7:14:61:46:16:f5:50:b4:5a:f2:d4:f6:
                    2e:c9:85:b4:ea:63:c6:da:75:44:2a:6a:f5:ff:eb:
                    8e:ce:20:97:76:e7:5c:85:7b:a2:8d:3c:27:54:20:
                    d2:d1:fe:6a:68:9d:d9:84:39:8c:72:05:61:dd:23:
                    ab:46:27:e8:55:4f:e0:1d:41:77:e8:f3:a1:75:7e:
                    34:a7:ff:ec:93:d2:c1:5e:ac:c6:bc:39:49:3d:5e:
                    4d:2a:32:04:4c:90:ef:2f:f0:85:0c:4c:8b:09:84:
                    3d:7a:2f:66:c3:43:d8:b8:bf:08:05:b6:44:ad:8b:
                    b8:46:72:ee:cf:76:26:8c:f7:56:be:ab:a4:8b:8f:
                    fe:c1:19:d2:88:4a:69:c6:bf:62:11:d8:87:d8:9d:
                    b0:c5:d3:be:55:a5:62:cf:a0:45:f8:91:2e:92:1c:
                    a5:d1:39:e9:fe:ce:09:96:54:e0:4c:2e:e7:60:77:
                    ca:18:6a:38:22:04:54:52:5d:45:6a:b3:ec:2b:31:
                    6d:04:98:22:fd:a6:81:35:ad:63:4a:6d:44:49:be:
                    bc:cc:5d:1e:09:c7:35:8b:e8:63:16:15:3b:6c:c4:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:D4:47:93:21:A0:AE:CD:66:B9:5E:24:CA:A5:F9:91:F6:7D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:9c:c3:e8:15:c0:f0:79:f9:d6:bf:83:41:6b:49:eb:cd:
         ed:ba:45:ba:9f:6c:e2:26:0a:80:28:27:65:81:0a:43:8b:e2:
         93:fa:42:a0:a6:19:a3:56:d9:4f:4a:c4:95:69:5b:8d:6b:99:
         72:5b:56:99:eb:1c:fa:60:1d:7d:c1:10:06:b1:13:ac:3c:6e:
         22:48:28:5f:61:71:e1:84:04:91:71:ce:c8:e8:b0:11:6c:3a:
         41:ef:02:e0:d9:2b:ff:cc:95:49:57:f3:48:00:cd:c3:1e:6f:
         ab:09:8b:3c:f8:1b:e9:38:40:32:45:05:7a:0f:36:2b:e1:3e:
         a1:c5:2d:87:3e:d8:c0:fd:b2:c7:53:2d:1e:8b:2d:7f:f0:73:
         79:2d:1c:36:a3:69:73:2a:b9:2a:e1:23:55:6d:46:96:85:8e:
         91:77:7a:61:12:e7:ec:bb:bc:01:ec:f5:8d:e0:cc:6f:00:2e:
         30:70:02:dc:53:ba:fd:c7:82:81:e5:47:04:9b:1e:f3:4e:99:
         07:38:d7:e6:28:ca:5e:94:28:ad:93:cb:18:e6:53:c1:fb:64:
         6a:9c:b7:a6:f7:bf:a3:84:53:63:40:62:69:f7:43:13:db:6a:
         46:ab:34:07:27:4e:64:94:78:85:e5:a7:4f:31:aa:eb:b7:f8:
         71:6a:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:27 2025 by rpki-client