Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa
File:                     2d9943a0-631a-3820-a892-77df70fc08aa.roa (raw, json)
Hash identifier:          brznZUOpwP5JNFymZrloltEBIgalnDeVNVMnnq4oqFE=
Subject key identifier:   A4:D0:D2:C8:DE:AB:7D:7C:AA:A5:AA:5E:13:D4:EF:05:A1:86:C1:C4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584EC2559FD077E5C6B73D0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        142.111.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ec:25:59:fd:07:7e:5c:6b:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=1d6ba10c-7bfe-495e-8c54-492dde7ccae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:ae:f6:ba:12:72:6e:b6:10:c0:99:46:d4:
                    1d:0d:90:64:ac:cd:35:aa:52:c2:cf:45:ee:a6:9f:
                    53:34:26:83:8f:93:27:31:40:c7:fb:4f:35:64:32:
                    1b:0a:4b:8f:40:36:7f:b8:ec:96:aa:a3:18:1e:0a:
                    ad:c3:97:ca:cf:36:30:15:61:d8:c3:02:f3:ef:25:
                    43:1d:21:65:39:9a:2a:58:97:61:59:e1:7c:0f:f4:
                    19:df:37:35:d2:a4:85:2b:42:4e:6d:dd:a0:a4:ee:
                    b4:db:c0:ba:97:33:e9:d5:42:4b:61:bb:f2:12:c0:
                    e3:a9:dd:78:00:80:98:2a:ab:3b:b4:fb:03:42:96:
                    79:8d:25:08:18:b3:9f:e9:77:71:5c:9f:ca:38:d6:
                    21:5c:89:61:2d:7c:ac:22:af:21:cf:9c:39:77:45:
                    f2:2e:ff:2b:c6:d3:bd:3e:5a:a3:34:45:3c:52:f8:
                    38:71:21:63:be:78:17:9d:3e:96:a3:7e:ae:f0:85:
                    b7:41:34:a7:e6:f0:55:c7:bf:72:ac:e7:a7:b1:aa:
                    3d:e8:f5:2e:88:41:56:70:ba:d4:b0:e4:b7:bb:27:
                    49:a5:88:0a:f7:43:2b:46:b6:41:66:7d:f9:8d:5c:
                    46:91:e3:74:d2:42:49:be:6b:80:3b:31:30:01:81:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D0:D2:C8:DE:AB:7D:7C:AA:A5:AA:5E:13:D4:EF:05:A1:86:C1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:d8:17:c2:fe:47:61:d4:74:12:18:b0:3d:ad:d9:4a:b9:
         3d:2f:6e:2a:bf:0d:18:8b:7d:6e:c7:1f:c8:ec:07:86:4a:60:
         31:9f:71:ec:ab:98:f7:64:91:2d:06:69:83:4d:5e:30:60:96:
         af:29:cb:08:c6:d1:a2:d4:d5:12:ec:13:22:77:54:64:64:7c:
         d7:8c:31:14:1b:ba:70:63:b3:48:2c:83:ca:fd:17:17:4d:80:
         aa:5d:d8:c5:0a:ef:77:6d:86:f6:1a:ed:40:18:38:36:b8:06:
         db:85:b3:7c:3b:fe:92:f5:18:0f:bb:94:c2:b7:40:fd:b8:17:
         bd:90:81:a3:91:cb:57:62:d7:4a:a4:10:a7:2a:48:5c:58:fd:
         49:87:bb:68:07:3d:4b:28:24:14:d7:e4:b2:48:99:22:16:ab:
         7e:a3:b5:55:ca:32:b7:21:43:05:31:ea:b3:c7:9f:c2:1c:4a:
         3f:fd:e4:fe:4c:52:3d:28:e2:95:18:9d:4a:f5:df:05:91:ca:
         55:0f:ff:16:f4:1b:58:d8:91:aa:fa:45:aa:be:8d:26:1d:42:
         f0:51:01:9b:46:87:83:47:34:a8:73:ca:9d:d0:4c:99:b9:4c:
         39:e6:13:9d:62:e7:93:8f:82:e1:6a:e5:f8:6b:c3:1d:ae:72:
         ba:2b:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:30 2025 by rpki-client