Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/5b9313da-3c86-3fb6-a175-febef0c8eb91.roa
File:                     5b9313da-3c86-3fb6-a175-febef0c8eb91.roa (raw, json)
Hash identifier:          d2BnKX3o+C9mtLJ859S4ni32C1pahSEfc+l/bZE9h9w=
Subject key identifier:   1D:47:24:D2:3A:9B:E1:43:D1:A7:08:71:62:FB:E1:7E:51:C4:10:22
Certificate issuer:       /CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
Certificate serial:       010D0C9F43285848451589B065E1A41DBCE27680
Authority key identifier: E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/5b9313da-3c86-3fb6-a175-febef0c8eb91.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     7922
IP address blocks:        134.195.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:89:b0:65:e1:a4:1d:bc:e2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=194c8213-305c-40dc-850a-24ca1726d8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:23:a1:33:0c:97:b5:21:bf:f7:36:da:dc:
                    d8:56:05:af:6b:27:30:a7:fd:04:ca:3b:dd:4a:00:
                    36:ef:6d:27:6b:ee:88:92:0a:ac:cd:7f:8f:4e:f1:
                    76:1f:56:5f:cc:2d:9e:9d:5d:34:05:90:d7:9d:89:
                    00:68:c1:0f:d9:85:bc:01:0d:db:4e:65:3f:88:f7:
                    8d:0c:a7:d2:ef:28:6b:ff:0c:49:73:f8:11:4c:3e:
                    38:9f:44:c9:66:d6:6f:db:78:45:74:e8:d0:ba:94:
                    f6:e4:ee:71:9d:1f:96:18:ca:c0:6e:16:c3:4d:a1:
                    a6:44:f8:4e:9b:dc:2e:ff:6a:a4:89:1f:f9:e7:4c:
                    64:36:2d:49:f0:f8:d8:c0:66:e4:d2:f4:5c:c1:41:
                    6e:6d:ba:d1:42:6d:e1:99:1e:45:7e:0a:b4:04:0f:
                    e1:c8:9f:6e:40:a7:51:39:fb:6a:ff:e8:3f:2f:60:
                    11:0e:0f:40:75:de:2d:9e:c5:64:48:33:68:37:eb:
                    7d:a3:13:9f:4f:6d:5c:f1:a0:63:21:29:ca:78:f6:
                    ae:fb:4e:81:d3:d8:48:e6:80:17:f7:df:c5:ef:5c:
                    89:52:82:43:22:cf:0a:93:5f:80:c3:88:06:02:b4:
                    cb:93:66:7c:19:59:80:c7:3b:fe:15:a1:c1:35:3a:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:47:24:D2:3A:9B:E1:43:D1:A7:08:71:62:FB:E1:7E:51:C4:10:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/5b9313da-3c86-3fb6-a175-febef0c8eb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.crl

            X509v3 Authority Key Identifier:
                keyid:E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:a0:c6:ae:d1:02:cd:cd:08:6a:9f:e4:65:76:7c:18:ca:
         d8:bc:47:8d:27:68:de:00:0e:32:30:f4:dd:8b:35:75:c0:a7:
         8d:fc:0f:45:79:c9:c2:21:3d:65:bb:8e:0a:1a:92:b0:11:ef:
         52:5c:72:0d:db:1e:8f:2e:d7:a7:0c:aa:2f:a0:79:ae:c1:86:
         24:09:78:ee:1a:dc:73:26:d1:8a:20:75:26:42:ce:9d:6b:5d:
         db:88:4a:84:6b:c5:0a:b2:7a:c3:7a:94:14:24:43:f7:87:1b:
         88:ab:3a:d9:99:d0:b1:8d:96:1b:ad:67:5a:24:87:1c:95:30:
         7b:73:80:36:51:7e:86:53:9f:af:e0:dc:97:45:ea:cc:98:7b:
         8d:25:2a:98:9c:1e:a7:da:af:cd:16:1a:a2:70:82:2e:c7:20:
         79:12:cf:2f:ad:9c:7a:23:5c:08:0e:70:bf:d6:87:3c:ab:92:
         51:52:8b:65:0e:68:33:ef:a5:43:ba:58:ad:e0:54:b1:71:a3:
         d8:c2:84:1b:22:c3:07:d0:18:9a:fd:c8:aa:a3:d4:95:3d:aa:
         66:6f:ec:70:cc:87:27:9e:83:fb:1a:e2:1f:db:da:7f:a3:c3:
         1a:c6:f4:7a:0d:a1:2b:db:8e:45:71:8e:14:f7:b8:f5:bf:7a:
         1a:1e:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:11 2025 by rpki-client