Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa
File:                     b8c973c8-3db8-32ff-958c-2ce5e573f783.roa (raw, json)
Hash identifier:          JTb6oxmaBHXkGc+MiSaBo2/4XY22CThcIlRxchi7t+0=
Subject key identifier:   0B:A4:9E:6E:12:10:AE:88:6F:10:60:49:B6:CC:77:A5:BD:49:7F:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA48F7D9223B5AAD3B580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a4:8f:7d:92:23:b5:aa:d3:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=180b0fb6-1e92-46f8-bd0c-7c63869c27fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:e2:39:94:82:dc:42:a8:0d:8d:cd:75:74:
                    42:83:2c:46:9a:0e:e6:7f:86:42:32:5c:03:8c:57:
                    7e:c1:5b:c0:65:7b:c2:e3:21:5f:6c:21:b1:13:88:
                    01:5d:de:94:81:9d:9c:70:99:8e:14:d3:46:93:01:
                    d5:ac:fb:b6:8d:09:8e:31:c5:f5:0f:15:b9:92:42:
                    f2:fa:ce:36:27:1c:e4:90:83:d5:7a:e4:2e:3c:a6:
                    f5:e6:54:eb:74:15:bf:79:00:f8:72:0e:3b:69:4a:
                    b4:2b:67:fa:57:3d:f7:95:2c:41:7b:ab:13:b8:60:
                    dc:3d:68:75:10:b1:cb:b7:6a:06:d6:44:a0:75:51:
                    ef:ea:a8:94:63:17:1f:09:4b:2f:32:8d:39:b5:c2:
                    3c:40:74:c1:db:47:31:f7:9e:11:e5:6e:5f:83:4e:
                    bf:2f:47:eb:51:cd:e6:37:e2:d6:ed:13:00:2c:66:
                    e1:6f:93:e2:ca:02:92:85:66:7b:8d:78:66:f4:e1:
                    80:68:c1:ec:31:ac:21:b1:77:ad:8f:7d:e1:a7:bf:
                    f3:a1:af:ec:b2:ac:e8:14:56:6b:0b:50:de:36:6b:
                    f2:b6:ac:e9:1b:cc:95:e7:dd:fe:ac:53:a3:07:e6:
                    ee:46:77:3b:d7:ff:53:37:25:80:5d:df:fe:8c:1e:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:9E:6E:12:10:AE:88:6F:10:60:49:B6:CC:77:A5:BD:49:7F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:73:3e:82:78:1a:4c:a8:5c:9a:0e:ec:49:c9:06:95:ef:0e:
         35:80:a1:d3:3f:56:cc:98:3b:d8:88:eb:61:7a:ec:87:fe:00:
         58:a9:06:83:68:96:5c:d0:c4:40:df:3d:c3:57:af:53:aa:60:
         06:53:18:c8:d0:16:73:8b:92:3f:37:c2:5b:69:9f:2a:1e:89:
         53:67:36:76:2b:97:af:2e:3e:7f:1a:9b:9b:f1:56:46:8a:b4:
         0b:b3:53:b2:a1:b7:83:e0:10:f2:45:de:87:b7:12:8b:b4:c0:
         d0:95:53:ff:9d:1c:e5:50:5d:55:bf:02:96:25:9b:d0:25:08:
         a2:de:cb:ae:13:40:e4:e0:04:e8:35:b6:1c:4d:3f:66:6b:f6:
         76:39:a2:21:c5:29:1a:e6:c8:81:b7:0d:df:b4:f6:c4:5d:f0:
         a6:fc:ab:2f:18:d7:86:bf:b4:f5:b8:2b:2f:14:75:6d:60:ef:
         ea:e8:04:b5:70:e9:a8:1a:4d:3b:3c:e2:92:dc:a8:78:11:b4:
         1a:00:26:d3:f5:83:02:3d:c1:12:40:47:7c:24:2a:fc:23:2a:
         e1:0d:7c:a6:32:df:47:d1:fa:a8:27:60:3f:25:a2:dd:b4:3e:
         6b:02:5f:54:2d:89:8b:6a:83:73:2b:11:aa:f9:b9:93:fc:65:
         f4:e8:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:31 2025 by rpki-client