Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa
File:                     69011358-0e85-381c-baf2-e85ccc1ed625.roa (raw, json)
Hash identifier:          qVoHMK2iKNadOK7z9f2OlnSitE+LLh5e3uraHXVdCDw=
Subject key identifier:   8D:AE:74:DC:EA:A6:51:A5:4B:57:76:21:07:4D:09:FB:E0:A1:A4:6A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584800AFA6253A6A8E9C1DF768C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     396596
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:a6:25:3a:6a:8e:9c:1d:f7:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=84599415-3e91-4832-ab33-4041f871ab9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:b6:25:9e:77:f8:45:41:57:00:61:a5:15:
                    48:4a:d5:a7:28:83:ac:1f:ba:de:90:ab:64:7e:d2:
                    56:7f:90:8c:e8:1c:ac:b7:18:00:bd:61:dc:7a:17:
                    4b:23:77:a9:e5:1e:0e:15:1a:4b:8c:00:74:e0:fa:
                    c4:45:41:ab:b3:fd:58:0c:9b:83:de:90:ab:8d:61:
                    2c:ca:aa:ce:6b:bb:55:a4:b2:5b:58:16:14:b6:ca:
                    71:10:81:c1:c3:e8:05:ed:14:88:c8:bc:9e:2a:43:
                    20:07:49:10:a8:41:42:f3:3c:5d:f4:8e:95:7a:7c:
                    c1:ba:2c:63:a5:13:43:78:ad:36:bc:6c:09:75:98:
                    11:96:ef:ae:8c:39:27:21:ab:3d:34:cf:c3:d7:9f:
                    91:c6:ad:ac:60:8d:29:b9:0e:35:e7:02:1d:d7:31:
                    4c:ab:ed:92:87:8c:13:4c:ae:3f:ed:5a:d2:73:48:
                    17:f4:63:1a:30:ce:f7:66:87:87:cc:89:ab:d9:60:
                    aa:11:48:87:01:8c:61:f9:85:7f:80:90:db:f7:af:
                    b9:18:85:b4:ad:a1:34:5b:44:23:26:9d:64:da:03:
                    20:5c:f8:d4:9c:a2:a8:94:01:35:6f:0e:e6:0c:6a:
                    a5:8d:5b:62:57:94:4e:d9:0b:74:2c:41:ea:f1:48:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:74:DC:EA:A6:51:A5:4B:57:76:21:07:4D:09:FB:E0:A1:A4:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:81:02:52:e9:30:28:cf:94:9f:c3:72:87:56:f2:33:7c:
         66:79:4a:60:92:84:83:eb:b8:6a:f3:f5:8a:02:5f:56:b8:72:
         ac:12:56:e0:8a:c8:c1:f6:d7:0e:f7:11:d4:f1:88:38:e1:ff:
         86:b2:51:52:47:35:8a:ad:a2:12:cf:c4:9e:f9:9b:79:97:f5:
         5f:0b:c1:ca:63:bd:9a:db:66:b5:73:4d:3e:fc:19:04:47:d5:
         77:89:83:e3:47:32:72:5a:8e:48:49:f7:2a:3a:17:33:4c:8e:
         87:e9:5c:0e:32:ea:2f:6d:36:7f:f9:41:db:95:89:5f:f2:83:
         bc:00:25:30:bf:9f:ad:b4:8c:24:9b:db:2f:85:62:cf:33:3e:
         06:35:5c:64:f6:9d:8b:40:2a:2d:9b:54:83:2c:5e:32:44:5a:
         b7:26:f1:ee:d2:57:5a:9e:2c:73:a9:89:7c:47:96:d4:8a:97:
         2e:b1:77:d2:7d:88:b2:45:5e:c7:14:13:3f:34:be:dc:f8:b8:
         a5:17:f3:68:c8:e7:8f:20:59:37:fe:24:ca:81:70:dc:7a:1b:
         3a:43:71:41:69:c2:6f:da:1a:ab:90:a4:45:9f:79:fb:af:e8:
         ec:cc:9e:0d:b4:c3:41:25:d9:f9:e2:24:e4:1f:3f:7e:e7:bb:
         aa:29:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:44 2025 by rpki-client