Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa
File:                     fc8d790d-3854-30a3-ac52-4854a52b7835.roa (raw, json)
Hash identifier:          nPQ3A5+jtQU9FkAvjbQ6iYabbtBaXMk///+gWyc61ps=
Subject key identifier:   62:7D:A1:CA:BE:27:B2:F6:C8:D0:F9:65:33:92:3F:8E:8B:1F:F2:71
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584858A051F970862D63953C6B80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     18434
IP address blocks:        156.55.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:51:f9:70:86:2d:63:95:3c:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=975f4696-d7d0-4209-9b66-6417f29a210c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:bb:3e:c0:35:58:2b:90:0f:c3:e1:de:2b:
                    c4:c8:bc:52:c0:31:21:b2:49:ce:95:bf:14:2d:9f:
                    bb:fa:7a:60:4a:0f:60:09:06:52:27:0b:17:29:38:
                    1b:a8:70:fd:bf:02:0c:b2:54:a1:87:9c:ab:0a:62:
                    f1:66:b1:4a:b0:4f:d4:33:2c:2d:f3:59:01:5c:7e:
                    f8:8d:aa:b8:b3:ee:09:2f:80:14:85:0a:54:90:69:
                    f6:b1:89:bb:e2:c9:40:57:c0:50:ec:6d:26:94:d2:
                    1e:a3:d5:6b:aa:1d:cc:2d:c3:12:19:f9:96:08:7d:
                    80:0e:1c:59:11:30:a4:4c:8d:a0:05:f5:7e:c6:4c:
                    94:8c:36:af:ee:c0:3a:77:27:5c:92:5d:48:d5:2b:
                    2a:78:95:c4:57:8d:30:3f:b0:4b:80:ee:fd:17:76:
                    d7:06:e7:a4:fc:77:cc:fc:16:14:48:d9:f3:03:af:
                    13:93:56:a6:97:d9:69:40:40:93:41:90:e0:81:dd:
                    4a:0b:4e:d9:a8:38:a0:c0:cd:12:da:1c:6f:1f:0a:
                    6b:a7:c9:cb:c9:5e:1a:37:1f:80:4a:41:33:e6:c2:
                    69:71:80:94:d3:5c:90:07:df:a9:ac:ac:24:3c:a9:
                    4c:34:4e:6d:f9:a6:f5:8c:2e:2d:71:fd:44:c4:b2:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:A1:CA:BE:27:B2:F6:C8:D0:F9:65:33:92:3F:8E:8B:1F:F2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:bb:fc:0c:9c:1a:9b:12:97:b3:c1:ee:43:2c:98:8f:64:d7:
         57:a6:5a:43:c8:a0:dd:e1:fb:4f:f9:f5:97:a4:a1:92:a9:93:
         be:f8:58:31:50:cb:5b:5a:f1:9e:2a:12:52:c0:5b:47:54:46:
         03:c2:64:f5:2a:ed:63:a1:11:c2:c3:d2:1d:c5:3d:55:9e:40:
         0a:b8:64:26:69:7b:d4:98:f8:29:eb:c7:58:b1:87:ce:90:30:
         5a:99:f9:92:f9:ef:7a:d0:79:d7:3a:fa:78:74:0b:c4:3e:21:
         3f:43:9b:2c:3e:0f:e8:03:2e:2e:37:d1:ab:fe:d3:e4:67:58:
         11:a3:d8:28:1a:c3:b0:de:06:72:85:aa:54:ef:67:b0:6e:fe:
         c9:8f:e2:6f:56:70:3e:33:fe:ea:4f:95:07:07:1e:9a:b9:41:
         26:3f:5c:a0:ae:d5:c0:c3:4f:04:e0:d8:33:fe:fe:7a:97:41:
         b8:42:76:80:17:49:16:b2:94:f7:87:4e:89:51:fe:a1:d4:06:
         36:e0:b0:c9:61:14:93:8b:77:ef:06:3f:fe:f2:2e:48:dd:72:
         c3:09:fa:89:d1:10:18:ec:2f:b6:b6:0a:16:f0:d0:21:ac:eb:
         17:03:50:22:e0:8c:82:2e:1b:e5:0f:d8:d3:26:bf:37:34:5b:
         56:93:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:30 2025 by rpki-client