Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa
File:                     d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa (raw, json)
Hash identifier:          dRxpwTvqhYdyg9ZdjfG1hQ45LoNB3RYfHtM75F0ZQmk=
Subject key identifier:   FD:4A:1B:9C:D4:9B:A4:EF:3B:17:A0:A2:1F:BB:75:49:25:D5:92:51
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584830253DEBA67F5274D8ED63C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3d:eb:a6:7f:52:74:d8:ed:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=e6790a73-79a0-4673-bbf1-76ec38af80e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:9e:b4:43:cb:12:7a:06:84:0f:4d:2d:47:
                    0b:43:cf:a0:92:cf:72:b4:4d:f4:5a:de:78:a9:fe:
                    7a:2e:5f:36:9d:ca:59:54:31:f1:c6:ff:b7:dc:35:
                    85:04:3e:f8:f3:b8:f7:f4:be:ea:fc:22:54:8f:df:
                    c0:26:8d:b6:89:c4:4d:3f:fb:52:46:76:97:ad:73:
                    a4:20:13:66:b9:50:42:8b:4e:e6:78:18:05:4d:95:
                    57:69:4b:28:9f:44:85:bd:57:53:4a:8d:6f:7c:67:
                    95:05:d4:c1:dc:cd:5a:db:1e:fa:5f:1d:7b:9a:7e:
                    17:cc:4d:6c:f8:bd:3e:4f:35:0a:82:fb:98:59:0d:
                    e4:8a:d6:bf:23:86:25:ef:1d:7e:d5:ed:30:48:84:
                    86:51:36:b9:eb:07:66:55:83:81:c7:ee:cf:8f:5f:
                    08:57:fd:89:7b:2f:a7:d2:b0:b4:1a:5a:27:12:34:
                    8d:58:7f:72:67:9f:0f:ab:9f:a2:37:8d:5a:33:f2:
                    d2:30:ec:ce:e6:6b:b9:ae:ef:b6:8c:ef:4b:c1:19:
                    ab:49:3e:98:b0:76:f6:80:af:bc:3c:ef:36:9c:ac:
                    d9:8c:a0:28:ef:f2:61:f3:5c:5a:e6:f7:cc:0b:c7:
                    d1:86:d2:10:df:b5:49:b1:df:ec:9f:06:80:5e:43:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:1B:9C:D4:9B:A4:EF:3B:17:A0:A2:1F:BB:75:49:25:D5:92:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7f:83:a4:5c:2e:0a:10:1e:3f:d2:10:cc:a4:89:7b:aa:07:
         7f:4a:01:d9:55:36:d9:87:45:cc:10:b1:16:43:77:25:d0:6e:
         4a:28:58:be:f9:56:92:70:42:a5:20:6f:9f:21:82:00:80:4a:
         4f:29:4e:88:08:60:4b:26:ee:70:9e:9f:bc:c4:42:77:ba:67:
         9d:7b:38:13:ed:a1:e8:c4:4a:60:0d:6d:65:e0:2b:90:93:bc:
         aa:e9:2a:df:50:25:8b:77:bf:0d:92:94:38:a6:fc:81:dd:21:
         83:9f:a0:26:57:42:a5:3a:f6:c7:44:d6:8b:0c:84:fb:7b:16:
         78:ee:36:27:9a:81:43:0c:7f:e4:7d:47:d6:20:c9:25:3f:6f:
         f4:cf:a8:82:d6:0b:15:25:cd:29:e2:c2:02:03:cc:73:75:e1:
         88:6c:4b:12:49:22:58:ba:64:0b:a3:85:04:49:64:b7:06:4a:
         13:de:00:62:ff:18:a8:a4:ac:ae:f4:65:4a:3d:db:8c:51:24:
         25:5f:2e:c8:ab:8b:ef:15:e5:40:1a:0e:da:60:fc:25:df:01:
         27:3d:57:ca:7d:32:7a:1f:bb:5d:e2:c4:06:97:ec:f3:3c:8c:
         be:8f:a9:43:0b:16:60:7a:f9:f0:07:0a:b5:b4:3f:e0:ee:ef:
         ef:a9:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:46:39 2025 by rpki-client