Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/5ac18155-a672-3f0c-9ec4-9c49c5350cef.roa
File:                     5ac18155-a672-3f0c-9ec4-9c49c5350cef.roa (raw, json)
Hash identifier:          NYsZlDLtozOOdAcw3GkBc0/kQmena92qjV2K1wtnOxg=
Subject key identifier:   07:AC:FC:AA:63:FB:B0:85:8E:99:1D:84:98:28:65:0D:F9:C5:95:00
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858483D4CCBD07E8FFA55ABAD9BC0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/5ac18155-a672-3f0c-9ec4-9c49c5350cef.roa
Signing time:             Tue 17 Dec 2024 19:05:56 +0000
ROA not before:           Tue 17 Dec 2024 19:05:56 +0000
ROA not after:            Mon 17 Mar 2025 18:05:56 +0000
asID:                     7979
IP address blocks:        172.102.210.0/24 maxlen: 24
                          216.158.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:4c:cb:d0:7e:8f:fa:55:ab:ad:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Dec 17 19:05:56 2024 GMT
            Not After : Mar 17 18:05:56 2025 GMT
        Subject: CN=f42fe150-ca73-41b2-abb1-f7282d0f19df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:c8:d1:8c:31:c0:c7:a9:72:d5:de:77:93:
                    7a:c8:c1:76:10:f8:98:08:8c:4f:eb:61:f5:e6:54:
                    84:30:28:be:56:5d:98:dc:ac:ff:1b:c2:33:d3:b1:
                    d6:24:30:ad:8f:f0:b9:50:24:7d:52:9b:71:3b:d0:
                    6a:0d:2b:3b:5c:8e:08:1b:d9:46:12:37:70:a6:6e:
                    f9:3c:c2:69:f0:2c:e9:2c:75:2a:d1:3a:ba:21:4b:
                    99:23:1d:a0:11:e5:b6:13:00:24:7c:0c:5b:93:9c:
                    05:cf:c3:ab:24:ab:c8:88:60:62:0d:25:a3:28:89:
                    ab:cb:99:24:d1:4c:a2:86:a4:0b:2d:b0:16:ab:51:
                    c2:8e:64:f9:9e:b0:d6:f4:cb:b1:e2:44:04:b9:15:
                    5e:a3:82:76:54:a7:16:24:9e:b6:02:ce:c1:8e:0d:
                    9c:93:6b:a7:4f:e1:a8:2a:10:2e:d6:f4:45:cb:c1:
                    d3:e2:3a:bd:d9:d5:b0:02:66:d4:93:5e:58:f0:fa:
                    c3:4c:bf:94:08:6f:bd:fe:e7:2c:9a:8a:7a:4f:05:
                    d4:53:c0:5f:7e:30:c9:4e:1d:62:37:e5:0c:07:1a:
                    2d:50:1f:d2:a6:9a:11:e1:b3:96:f2:0b:c6:9c:aa:
                    33:de:a6:84:34:4d:45:14:74:2d:8b:7c:55:96:97:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AC:FC:AA:63:FB:B0:85:8E:99:1D:84:98:28:65:0D:F9:C5:95:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/5ac18155-a672-3f0c-9ec4-9c49c5350cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.210.0/24
                  216.158.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:ba:76:85:96:a7:91:ea:84:cf:27:5a:7a:19:97:be:f2:
         f2:1e:7f:55:2d:24:77:0b:7c:86:06:bb:ad:ec:c8:7b:43:41:
         66:ab:40:de:2a:ff:49:c5:70:f9:5d:ad:9f:90:f6:1c:70:80:
         7d:7d:d4:7e:b2:95:16:66:c0:3c:95:65:c7:03:da:69:44:ce:
         4d:0e:40:48:6f:c1:78:10:43:3c:e0:e3:5c:a7:42:c2:9c:0d:
         32:18:dc:26:58:a7:8d:73:24:c3:8f:1a:44:62:8e:d8:d8:ce:
         ad:c7:24:76:9c:77:74:e3:64:f5:e8:fe:07:b6:ef:f1:aa:0d:
         1b:2a:22:d8:07:50:6f:40:8b:ef:f8:62:fa:71:e6:bb:d0:9b:
         99:68:1d:d7:33:e0:1c:a5:76:65:59:50:41:2c:c7:1c:d3:2d:
         b9:ed:6e:6a:88:fa:5d:6d:05:f0:25:95:23:95:44:28:0d:72:
         d0:7c:17:1a:6d:c5:ac:b3:53:20:e6:8b:9a:29:fa:25:a1:47:
         c5:2c:fc:55:92:fa:14:19:9b:47:19:82:48:65:48:d0:e1:c1:
         9f:4b:99:10:c8:82:fa:07:dc:ee:ec:a1:70:1d:82:8f:95:1a:
         ce:dd:75:fc:20:e8:4d:39:00:33:91:ee:d6:9c:aa:33:09:2d:
         87:8f:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:16 2025 by rpki-client