Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/f0f85ab8-aea4-322f-93e6-c073c49fde36.roa
File:                     f0f85ab8-aea4-322f-93e6-c073c49fde36.roa (raw, json)
Hash identifier:          wcxeT1nytdo9H8EUgaisFDtDR8vOWiUgoZOP5ZDFEgQ=
Subject key identifier:   4C:58:B7:96:71:06:AF:C6:4B:2F:17:D5:2D:8A:6D:54:91:4C:47:95
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F4328584835BA940DD490D7F3E8381580
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/f0f85ab8-aea4-322f-93e6-c073c49fde36.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     201542
IP address blocks:        134.199.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:94:0d:d4:90:d7:f3:e8:38:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=bd4e22d8-40a2-42f4-88c8-e86f54f86275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:b4:6f:1d:20:70:7b:e2:c4:89:b2:1c:9f:
                    2c:77:e3:d6:1f:6e:9a:51:7b:8d:af:4a:ff:f1:f8:
                    bd:2b:8e:73:10:a3:10:fa:c6:f1:40:ca:63:c5:31:
                    b4:f3:52:52:b8:0b:87:87:1f:7d:46:32:76:6a:d2:
                    68:c5:48:bf:a3:ec:3e:64:ee:b5:44:12:59:e8:13:
                    af:ce:64:c5:e3:7d:da:55:5c:4c:c9:9a:16:8b:c8:
                    fa:7e:be:75:1f:ac:5e:a8:26:31:64:00:de:3e:9d:
                    b3:ec:43:19:40:b4:0e:28:c1:f5:89:19:7b:c9:ef:
                    39:70:b8:0e:67:22:be:b4:99:60:a0:9c:25:8c:5c:
                    70:19:32:4f:21:99:e9:f3:26:e3:8e:2b:dd:23:bb:
                    43:f7:3f:d4:ef:ee:93:00:51:0e:e0:f0:4c:e0:5f:
                    e8:01:2b:d1:b2:58:b4:f8:ac:bd:e8:63:7a:87:43:
                    3d:d1:d5:0f:f2:16:e9:21:32:f2:dd:a9:48:98:60:
                    7a:1f:6a:d6:bf:fe:d6:b0:6b:61:26:cc:ea:06:4f:
                    fd:fe:64:ea:cf:b2:2c:66:60:52:82:6f:06:53:44:
                    06:ac:ad:b9:73:e8:ef:2c:ee:43:30:b4:ec:20:41:
                    47:fa:21:ba:b3:c0:8f:b7:43:83:e1:02:2f:af:57:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:B7:96:71:06:AF:C6:4B:2F:17:D5:2D:8A:6D:54:91:4C:47:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/f0f85ab8-aea4-322f-93e6-c073c49fde36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:90:aa:f5:1c:47:7d:de:4b:7e:c5:be:f2:6e:5b:d2:8a:a7:
         ca:f6:4e:01:5b:4b:55:e7:2f:5b:75:2c:8c:f8:22:98:be:f5:
         4e:32:54:c8:29:c3:3c:e3:7e:31:96:91:10:15:eb:cb:8d:53:
         0d:be:fa:69:0e:6d:00:ef:61:6e:e4:38:3e:ef:85:ae:a2:44:
         71:e7:7e:0f:2f:c1:3e:5d:3e:12:24:44:55:9c:79:21:50:bf:
         1b:d0:00:12:58:d5:e9:c9:78:36:4a:6d:48:93:f2:09:73:0a:
         cc:66:e7:ad:6b:cf:a5:db:b5:37:c6:cf:4e:7d:47:df:07:f4:
         7a:1d:9a:6c:de:4c:a5:0d:68:3d:51:80:7d:98:47:9f:a9:78:
         16:c2:33:4e:21:58:33:55:b7:ec:c1:33:9f:e1:8a:e7:72:08:
         55:2a:0d:9b:3d:b4:71:f6:28:4b:71:1a:12:dd:b0:67:35:24:
         3a:91:82:10:a7:51:1f:3a:ad:ea:41:1b:31:b8:ad:f5:85:2f:
         8d:47:6c:1c:b5:6c:37:f1:45:c7:2e:b7:41:6a:26:47:ed:06:
         0b:8c:cc:24:6f:b7:6e:e0:23:e2:e6:be:61:96:1a:e8:ab:53:
         b0:a2:43:7d:f5:d0:bc:73:71:0f:b3:dc:6e:a8:97:5d:97:e1:
         36:72:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:56 2025 by rpki-client