Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa
File:                     ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa (raw, json)
Hash identifier:          CShHLYt9D+dBAO60CLQRCOjmkkAz7x2fRTwDpJaqsO0=
Subject key identifier:   6F:9E:04:FA:3D:2B:81:45:88:EB:7D:81:D3:03:64:CA:2F:81:D2:16
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA14F6267FA2E10199580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a1:4f:62:67:fa:2e:10:19:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=5534ba68-c00c-4799-a03e-ce73ecd88d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:5a:c5:5d:aa:e7:1b:a5:2c:a7:c5:b8:29:
                    5c:b7:23:e4:3d:d5:ef:0a:d5:af:8d:48:42:b5:90:
                    09:1f:30:cb:70:e6:6c:68:61:3a:c2:78:ad:88:08:
                    5f:64:f5:c8:7c:b2:fe:16:f4:07:bf:34:a0:87:df:
                    53:21:8a:97:30:ae:c0:04:27:fd:74:21:88:c6:bd:
                    82:8e:be:c3:ce:94:b0:d2:61:4f:28:4b:54:4f:7a:
                    f4:5d:7d:d5:b4:cb:c2:49:4b:82:59:0d:e5:93:1d:
                    2b:54:57:04:38:68:01:39:d9:73:50:85:66:1f:da:
                    5e:71:72:3b:6b:ce:4c:a5:83:e1:6a:a8:0f:bf:f2:
                    fe:63:fc:a8:49:c1:69:ae:7f:b4:8f:df:ab:6b:c3:
                    75:20:c1:5d:29:8a:e3:1c:b7:7d:a8:30:51:ab:d0:
                    ff:48:d8:2b:66:35:b3:db:6d:95:35:3f:30:8c:4f:
                    dc:2c:ac:ab:cf:56:74:7a:34:f1:44:b7:88:ae:7f:
                    1f:eb:37:41:55:81:a8:e3:ac:1f:81:71:77:dc:1d:
                    dd:16:c4:9a:f2:20:7b:13:3e:09:82:2d:d7:f1:40:
                    9d:8a:3e:ab:5b:8e:60:21:eb:54:3c:80:75:d1:3d:
                    79:e5:30:99:f0:c8:14:54:e5:29:87:03:f0:63:6a:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:04:FA:3D:2B:81:45:88:EB:7D:81:D3:03:64:CA:2F:81:D2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:61:54:9d:76:9a:26:87:c4:74:48:28:b5:ae:dd:92:f2:3c:
         21:27:dd:ff:f9:d6:04:95:c9:87:b1:30:e6:58:4a:f8:81:2c:
         36:ae:64:cd:d6:86:15:f2:76:fe:41:60:e1:2d:03:07:b4:03:
         cd:0f:76:97:d3:47:98:cb:af:c8:80:1b:f8:b7:96:c5:2f:02:
         ef:35:f2:a2:90:4b:1e:d2:e7:eb:ca:aa:96:a6:57:d4:2b:00:
         3f:f5:be:15:3f:9c:e4:ce:ab:13:64:90:14:e2:3d:a3:c4:89:
         bd:d3:32:62:a3:3c:53:b9:33:2e:28:54:52:80:14:82:ce:e0:
         9a:3d:04:56:e2:72:45:a6:23:d9:25:c3:96:53:19:34:6c:b5:
         1d:3c:05:f0:cf:51:d8:cf:0e:c5:46:0b:a3:06:12:3a:96:be:
         99:41:dd:a4:f1:d4:38:34:59:5e:d2:11:b3:a2:5b:20:72:11:
         3a:21:91:73:ff:c6:36:57:bf:70:9b:50:94:b9:86:58:fb:c3:
         71:3d:13:2d:0e:f6:29:da:3d:39:dc:97:e7:ac:9e:0a:4a:80:
         bc:76:ce:89:48:2d:bd:83:df:39:9f:c9:05:01:27:a7:fc:06:
         b3:6c:34:3e:b5:f5:1b:e3:95:65:c9:8f:1f:b1:e7:11:51:e8:
         b7:55:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:15:21 2025 by rpki-client