Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa
File:                     bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa (raw, json)
Hash identifier:          YayI7L/NyDW/PxjHLhY81PsEBNSJNrLc+zW7ewLYtGs=
Subject key identifier:   62:18:AA:8E:41:2A:97:49:45:B3:2E:AE:36:7B:A6:A1:2F:6C:82:10
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584EB1B3408927C72779B40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        142.111.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:eb:1b:34:08:92:7c:72:77:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=807109fe-ef17-4fd0-a339-417ca00ace7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:97:45:1d:32:b4:85:4e:49:95:5a:28:4f:
                    ec:1a:03:6d:41:5a:27:85:82:cf:b7:2d:8e:1a:ff:
                    41:29:b3:8b:4a:23:1a:2d:b1:18:3b:d7:57:f4:cf:
                    f1:37:02:5d:6d:47:a5:f1:bc:03:39:7f:57:96:94:
                    d8:d2:0a:cb:39:a4:10:65:04:75:21:d5:88:25:54:
                    d4:c0:de:dc:69:86:46:86:02:b7:35:03:f4:f9:d2:
                    50:f3:1e:18:85:6b:7f:32:93:cf:9d:1a:5d:0d:12:
                    c7:d6:cb:16:d8:ef:16:69:e9:fe:b5:12:b8:40:44:
                    86:48:f4:8f:6d:bc:78:77:52:47:d1:9d:63:d7:fb:
                    54:19:a8:2f:22:dd:78:92:0b:f0:a4:ab:22:b2:1f:
                    05:56:c2:df:55:a1:81:e5:05:ff:eb:f1:87:c6:6c:
                    bd:d0:cc:a2:37:02:1f:f4:c4:3d:31:8e:c1:82:11:
                    68:7d:2f:75:1e:b3:4e:fb:a2:05:09:cb:af:fa:96:
                    16:3a:d0:72:14:f0:94:a0:06:f3:d9:7c:6d:4e:a3:
                    0d:d9:07:83:1b:6c:3f:bd:9a:b5:34:15:fd:6a:cb:
                    e5:a6:8a:5c:1c:38:31:12:a5:47:f5:64:6e:92:bc:
                    e1:e5:a3:1d:e4:a4:80:74:ba:a8:38:2d:0f:7f:86:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:18:AA:8E:41:2A:97:49:45:B3:2E:AE:36:7B:A6:A1:2F:6C:82:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:10:a8:26:e7:b6:2c:fa:1f:8d:d6:2f:f6:ce:5d:a2:36:27:
         d2:71:81:d6:f2:c3:d3:7e:47:86:54:04:ab:a2:2b:ff:c1:05:
         37:42:7d:82:b6:ca:3e:7e:08:9d:24:74:47:be:9f:bf:3f:54:
         76:54:ed:a7:7e:b6:ca:6e:ec:13:9f:ca:b5:d2:2a:98:95:ab:
         25:8c:e8:97:7b:ff:81:ad:e0:26:22:6d:30:b5:4c:ce:b1:4a:
         07:5f:85:6f:db:1a:3a:2d:9d:ca:2f:ac:c7:e3:10:69:cd:a4:
         6d:92:5c:9f:e3:e6:40:d5:fc:6b:b0:fe:ce:e5:bc:99:2b:c0:
         84:0c:58:37:32:6e:86:6d:a7:67:ed:bf:e0:14:62:9f:26:a4:
         2f:d9:5b:81:d3:bc:ca:8e:b9:c3:be:49:58:44:4f:ce:8a:73:
         dc:d0:8e:cb:21:71:2a:72:77:c3:e2:e5:51:41:4e:e9:fc:9c:
         25:a0:c0:73:b8:bf:0a:84:ae:5b:d4:91:6c:bb:b5:ef:ca:08:
         d5:30:2b:0b:0f:13:36:8c:21:88:99:03:f7:bf:b5:bb:b5:cb:
         85:bc:d6:07:37:55:fe:17:2c:c3:80:57:8c:7c:3b:ab:f5:f8:
         a1:19:9e:0e:95:0f:76:18:05:ab:be:7f:84:12:4d:3d:6d:e2:
         20:f6:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:53:07 2025 by rpki-client