Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
File:                     f1adbd29-319d-377f-910e-3fd95df8a73b.roa (raw, json)
Hash identifier:          Ax0QYR1qTyKGefcaeif+1HvhBjTfeywa+LggzA/Qw9s=
Subject key identifier:   C8:97:1E:74:DE:9D:FC:D9:A6:47:B4:CB:67:BB:1F:EE:FE:B2:76:30
Certificate issuer:       /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
Certificate serial:       010D0C9F4328584812D535FE9518F289F2BF9200
Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        162.219.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:35:fe:95:18:f2:89:f2:bf:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=46f7ad1d-2abb-4a4d-97f8-9d1af5cb4636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:94:57:de:7d:55:03:02:40:4c:c0:cc:09:
                    f4:0f:eb:e6:be:0c:c0:25:7b:57:8e:7f:f9:32:41:
                    7e:44:47:57:a5:97:c5:92:93:7d:d7:6b:37:bc:d8:
                    f2:0a:85:6f:83:07:9f:55:e8:dd:a8:a2:a0:37:90:
                    bb:16:fa:dc:2b:41:2b:ce:ee:a4:2e:1c:d8:be:69:
                    8f:b9:17:61:de:a6:51:96:23:e8:59:64:ad:96:84:
                    d9:33:39:4b:74:70:e3:8f:5f:e8:ec:33:6f:66:c4:
                    cc:1b:f9:2a:1e:cf:30:60:70:6d:97:b6:ea:4c:43:
                    01:43:6d:04:22:d1:4c:2c:08:f4:4e:35:aa:d3:b6:
                    5e:66:d3:5a:b8:77:aa:c0:71:42:39:ed:ff:ac:e3:
                    27:a0:9c:1a:56:cb:8d:c7:d5:2c:67:8b:c8:df:ff:
                    8b:de:88:d0:90:5d:d8:69:f7:b7:50:55:83:39:d1:
                    1e:db:0a:37:af:29:8b:72:02:9b:55:20:00:a2:1d:
                    26:0f:a2:95:5f:e5:18:6d:bf:e1:05:1a:dc:d4:18:
                    a9:9c:4c:8d:7d:8d:99:5d:33:89:d3:d7:dd:f8:ff:
                    03:30:c0:18:2d:1a:e4:cb:bb:ed:45:22:97:34:bd:
                    39:62:67:4a:d8:e0:bc:25:69:af:99:58:fb:d3:1e:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:1E:74:DE:9D:FC:D9:A6:47:B4:CB:67:BB:1F:EE:FE:B2:76:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:b9:26:e3:20:16:f3:ec:ac:8b:a4:36:0d:e5:31:2c:78:
         a0:8b:0b:20:39:b0:9b:b9:31:08:3d:22:4a:79:6f:a2:88:ec:
         3f:02:95:87:f2:c2:9e:6c:b3:2c:46:8c:68:8b:3b:3b:e2:b5:
         96:bb:af:3f:5d:75:b7:0b:45:a0:82:87:d8:5b:69:42:8a:a7:
         9a:98:69:60:0a:d9:02:13:cb:9d:50:87:3e:cf:b7:70:b5:8f:
         6c:a1:85:ec:07:f9:37:43:b8:57:8d:07:65:e4:12:26:6e:6c:
         0e:91:99:43:6e:4b:2e:b7:da:4e:05:30:e3:80:f8:9f:dd:b3:
         4a:cc:35:4b:08:b8:6c:33:dc:90:c6:58:82:95:8f:53:93:8f:
         ee:90:92:02:ad:49:3d:95:81:71:3b:58:9c:67:d8:5d:82:9c:
         e4:fa:6f:6a:74:30:54:41:58:ab:59:3f:32:fa:b6:61:a8:14:
         d7:41:5a:ab:f9:bf:8f:0b:94:46:3c:89:d5:c4:c2:4b:5d:9b:
         bf:93:19:64:61:51:4f:db:04:5d:86:82:43:8c:e1:7c:8e:a1:
         f1:f0:0c:c7:24:28:f2:c3:74:63:4a:f7:7b:a8:6b:0a:64:54:
         bc:fb:cb:07:7f:d9:72:39:83:0c:30:4d:42:a5:dc:16:1f:d5:
         84:6f:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:35 2025 by rpki-client