Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa
File:                     c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa (raw, json)
Hash identifier:          d75iZaPIKMKLovffGEkuLjSraH+K+5Bt+58QSg3mxrI=
Subject key identifier:   D8:04:29:77:B5:67:E5:62:28:64:FE:A2:F1:4B:31:AC:59:13:23:93
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA5D0FACAFBD829898300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a5:d0:fa:ca:fb:d8:29:89:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=b6652da2-2d3b-45f5-8c53-2b2e84732802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:2a:b0:8e:b3:f9:22:9e:b2:37:c9:3b:13:
                    ed:c6:89:9d:f1:2b:11:ee:c8:19:3c:f2:49:ea:ef:
                    1d:47:35:dd:70:84:f6:84:2c:26:5d:46:cb:e2:ec:
                    09:5a:5f:18:7b:91:95:04:c8:b7:4d:6a:ae:bf:34:
                    f1:00:e5:5f:da:53:01:f1:4d:2f:43:c5:db:16:d8:
                    29:ff:88:52:c1:ed:7a:60:9d:31:ce:e3:60:e4:ef:
                    a5:9f:c0:40:8b:0e:00:49:73:c7:e5:2e:f4:1a:5e:
                    fc:aa:2a:b0:3b:32:fe:77:dc:b9:07:a5:97:da:09:
                    3f:d0:e9:d3:10:df:ed:30:3b:07:e5:5b:a3:f1:eb:
                    d9:70:5c:73:0a:14:9e:7e:dc:88:b9:8c:69:8b:a1:
                    c1:fa:70:d0:b6:43:56:49:94:52:1b:03:93:1b:55:
                    a8:9d:18:d0:7d:46:13:eb:6a:e5:bb:47:c4:c9:6f:
                    66:fa:c6:90:b8:ba:12:f0:f0:d1:83:5e:d3:ef:be:
                    03:50:c1:e2:0e:b7:f6:73:b9:25:1d:b3:15:2d:63:
                    6a:cc:7d:f9:d6:61:4e:da:74:e9:e0:af:7f:2c:a0:
                    61:f0:ff:8e:3f:a3:73:d5:02:19:d6:1f:31:79:f7:
                    ff:1b:4a:19:e3:a8:04:b8:04:c5:55:9f:85:cc:4a:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:29:77:B5:67:E5:62:28:64:FE:A2:F1:4B:31:AC:59:13:23:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:f3:86:b6:d4:13:78:c8:8d:9a:b9:e6:8f:09:ba:46:7c:
         a5:71:f9:82:83:82:d3:17:14:85:08:63:74:b5:71:37:69:1a:
         d1:32:31:1f:a4:b2:81:fe:1c:13:f6:66:7e:0b:10:e3:2a:ed:
         36:5f:20:ff:bc:02:56:b1:6b:f1:1b:26:2b:d8:eb:8d:ae:85:
         40:7b:71:ed:a5:ab:e0:2a:af:2a:4e:9f:37:91:b6:3d:d4:5b:
         7a:46:98:b2:77:b0:99:06:9d:64:6b:8e:f6:9d:97:b9:bb:e2:
         61:7e:a9:55:6c:3a:08:fa:1c:a1:86:23:dc:17:d7:84:13:8c:
         43:bf:2d:35:6a:0f:d0:c5:ef:dd:f2:61:16:21:92:00:a9:0d:
         22:f2:21:f2:7a:cc:2f:e9:e9:90:b3:31:91:21:8b:a6:69:68:
         68:ff:f6:87:77:05:e9:28:b0:8b:6e:d1:79:35:5b:ca:80:68:
         68:23:32:ea:b3:3f:43:94:56:99:d0:5b:89:b5:d7:0b:57:7b:
         51:21:27:73:07:05:de:ea:bf:20:e7:3e:da:3e:a1:4d:23:93:
         7e:74:f6:93:d6:34:62:d5:d3:6f:49:49:13:0b:99:76:5d:bc:
         31:45:8d:64:f5:d4:4d:83:7a:78:46:c7:c0:61:50:d0:da:15:
         08:11:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:55 2025 by rpki-client