Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa
File:                     94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa (raw, json)
Hash identifier:          X0d6Eqgaaw8ErAmvS4DqOIX7Swv5XdeypbNMfmRjWDU=
Subject key identifier:   F5:25:1F:3B:18:EE:F6:A5:4C:6A:07:D1:A1:2E:C7:8C:7D:19:BE:A6
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F432858484C102677B7C152D1DBDA0B40
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        137.83.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:26:77:b7:c1:52:d1:db:da:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d009da9a-05d3-4c24-8c84-c5f5a8599fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:8d:e6:ed:de:09:79:fc:9a:5b:ed:11:de:
                    76:47:fd:03:84:26:6d:16:a8:27:74:2c:58:73:b6:
                    fd:04:1c:96:0d:4a:3d:c5:10:9e:d7:f0:fc:45:47:
                    68:78:d9:cf:b5:60:07:da:2a:7d:90:b4:1a:e3:24:
                    22:ee:83:bf:48:98:af:b6:88:86:08:ff:c5:2a:39:
                    24:92:1d:9b:9b:79:06:35:ec:d4:fa:c5:17:7a:e1:
                    47:85:43:c6:49:35:3d:9e:7e:61:30:ab:8d:46:37:
                    00:2f:b2:c0:76:7d:e7:01:ca:fe:ec:15:fd:c6:da:
                    9e:66:76:63:a0:17:e2:45:0a:d6:64:0a:76:59:5b:
                    e5:5a:8a:26:88:9e:ef:5b:be:ff:84:4c:49:99:8e:
                    2d:3a:52:7e:86:c2:98:b6:a7:9d:2a:49:7b:b3:7f:
                    6e:f8:ca:d1:25:f8:be:53:9e:b9:9e:9e:46:9e:1e:
                    f8:9d:5e:0f:2a:9d:73:97:95:d5:b3:98:93:be:39:
                    b9:f5:30:be:55:5b:92:b8:c5:c6:29:67:22:c8:37:
                    0c:a2:3b:ff:fd:70:76:ce:85:6b:e4:9c:64:84:b5:
                    99:85:dd:72:19:b2:fb:e1:4a:41:48:fa:b2:04:d1:
                    23:4d:d5:f1:2a:0c:0f:18:d4:d7:c0:50:cc:c9:d7:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:25:1F:3B:18:EE:F6:A5:4C:6A:07:D1:A1:2E:C7:8C:7D:19:BE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:60:2f:28:d3:18:80:fa:9d:99:80:77:81:10:20:a2:ef:7b:
         8a:52:d6:8b:3a:bb:a6:cd:eb:97:8c:ff:73:19:d8:4d:87:1e:
         34:7b:f9:8f:48:da:84:98:fc:bf:ac:da:7d:47:e6:ce:f2:8b:
         8d:5d:b1:f8:cb:2a:db:77:7d:c4:47:d9:73:de:17:1c:71:28:
         08:29:14:f9:92:cc:0d:3e:f5:33:7d:e8:12:f9:97:aa:1a:25:
         c3:3c:31:46:88:d7:13:7a:21:b2:d4:8b:23:e5:f6:47:62:06:
         1c:40:08:26:52:99:46:89:ed:bd:2e:7f:54:51:8f:67:c8:5d:
         20:4d:62:2a:85:79:6b:a0:ec:ae:49:ab:54:12:52:ec:e3:9e:
         b5:ed:eb:7c:56:92:d1:76:f3:41:a5:eb:3d:e7:1a:81:b5:a0:
         ff:08:d4:1f:d5:7e:a9:37:b9:76:0b:95:f4:bc:4a:ae:38:1f:
         f2:fd:f8:41:f1:7f:4a:d7:cd:b7:fe:e3:3c:ba:7f:ad:da:3e:
         ad:73:a9:10:0b:40:b2:ce:1d:0f:20:2c:40:89:a6:4f:17:fc:
         60:ad:a1:18:db:61:80:e0:be:29:dc:77:ba:a7:40:9f:0e:fb:
         7f:2b:e1:62:1b:00:62:5a:4c:43:47:5b:5a:52:d7:da:d3:24:
         ac:fe:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:39 2025 by rpki-client