Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/72fa7828-4e82-37bf-aa59-cb167ce85400.roa
File:                     72fa7828-4e82-37bf-aa59-cb167ce85400.roa (raw, json)
Hash identifier:          HvCRtVn9I4u2oNRXFRkHUG9oqGIabML46eI/f04ekW4=
Subject key identifier:   B7:6C:59:24:CD:DC:A1:10:61:6E:22:56:63:BB:AE:8F:97:4B:DA:AF
Certificate issuer:       /CN=113d4a61-c82e-4d8a-92a1-56c5486a3b96
Certificate serial:       010D0C9F43285848345568D4D55E7B47E3BDB53C
Authority key identifier: 4B:5E:ED:27:9F:69:99:0C:67:27:7B:BE:D0:1B:5E:46:A6:61:6E:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/72fa7828-4e82-37bf-aa59-cb167ce85400.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     715
IP address blocks:        192.101.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:68:d4:d5:5e:7b:47:e3:bd:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d4a61-c82e-4d8a-92a1-56c5486a3b96
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=2a01aadd-3132-4df2-8270-edabd7ea777b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:2c:da:e7:3d:ae:0f:7e:59:de:38:28:5a:
                    42:6c:0b:12:92:8f:5f:ba:a1:cb:c7:c8:17:75:bd:
                    06:49:99:f2:0a:36:80:62:70:fa:fa:f1:6e:3e:13:
                    5e:19:75:86:d4:78:ad:88:af:30:1a:97:2b:96:79:
                    73:54:85:96:91:60:3e:07:1d:c3:01:6b:e1:c1:3d:
                    66:47:88:43:8a:0b:33:c4:36:c8:25:5e:a7:f1:cc:
                    e6:af:4f:e9:06:17:49:2d:51:d7:e7:a7:d7:0f:0f:
                    f9:85:5d:ee:35:fb:12:74:82:c2:9d:a2:ad:7b:23:
                    b0:c3:d6:85:f4:be:33:b0:c0:c9:5f:49:86:19:5a:
                    b1:d6:ec:75:19:91:05:7c:dc:39:42:bd:f9:cb:c0:
                    a0:1d:34:d2:c8:15:88:6f:74:56:d3:68:4d:b9:0c:
                    83:19:b2:49:c0:de:db:59:06:f9:42:af:ff:67:6c:
                    af:e4:e0:01:c0:71:08:cd:86:72:d2:4c:57:ac:7e:
                    f0:50:bb:f5:4f:1b:cf:81:40:11:1c:26:f6:aa:24:
                    f5:d8:39:23:bb:15:1c:d9:ba:8c:67:8d:63:31:8d:
                    bb:da:c8:84:6e:19:f0:18:ed:75:ec:19:79:65:8e:
                    4b:f8:a7:b7:90:ba:80:7b:06:69:2e:fd:7d:4b:5b:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6C:59:24:CD:DC:A1:10:61:6E:22:56:63:BB:AE:8F:97:4B:DA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/72fa7828-4e82-37bf-aa59-cb167ce85400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/113d4a61-c82e-4d8a-92a1-56c5486a3b96.crl

            X509v3 Authority Key Identifier:
                keyid:4B:5E:ED:27:9F:69:99:0C:67:27:7B:BE:D0:1B:5E:46:A6:61:6E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:46:f2:a3:a7:3e:05:d1:fa:80:c1:77:02:bf:d3:3c:7b:
         71:f8:fc:09:12:41:00:32:6b:e3:b5:ae:af:65:b9:54:c8:65:
         99:05:d4:3d:1d:32:c0:f1:4e:c4:71:2f:9b:94:60:a1:b4:2e:
         5a:91:d1:76:53:51:72:91:8b:b0:31:4f:77:73:19:8d:b0:a2:
         98:ea:01:a9:d8:c9:6c:de:2f:16:5b:2e:eb:be:85:cf:60:8c:
         69:2c:0d:6f:18:18:24:1f:60:c9:e7:68:38:fa:2c:4b:e8:a2:
         b0:68:5a:b7:0e:c3:8e:8b:b0:72:13:8a:48:b8:68:ed:ef:3b:
         88:44:8b:28:ff:9e:8e:39:96:35:34:8f:63:cf:a1:ef:46:69:
         4a:7f:fc:1e:9c:87:fc:10:ae:a5:23:14:1d:86:57:a3:9e:47:
         0e:cb:2a:1d:69:e7:f7:c4:61:c9:72:3b:9a:8c:d5:19:05:7b:
         cf:f6:71:2b:24:2a:19:b4:dc:d2:c8:24:03:39:48:bf:88:b6:
         ab:3c:c3:8b:9e:c7:bf:02:b2:2e:24:f5:05:5e:7e:91:a7:11:
         b2:37:f7:40:76:d2:d7:03:ce:b4:85:63:a0:ea:a6:6a:13:fc:
         0c:ab:76:c8:a7:b3:7d:84:4e:83:dd:38:d8:a8:4b:15:28:53:
         e7:29:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:31 2025 by rpki-client