Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa
File:                     d020b984-10d1-399a-87b5-943c430128fe.roa (raw, json)
Hash identifier:          fdF3SYCtpT19vDEA/HULEZoF4ISTdURasVYTRND4Q28=
Subject key identifier:   F5:06:B1:37:A4:FA:79:B2:B2:B5:AB:D0:B2:3E:6D:6A:FF:8A:43:34
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584800AFA1C39C7F5802F7E109A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     396552
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:a1:c3:9c:7f:58:02:f7:e1:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=466b971f-1fa9-4ffa-aa7c-2c068ba118c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:60:0b:d5:7f:fd:cf:8d:7f:aa:e9:57:a3:
                    7e:5e:47:1a:b4:1b:be:34:70:2c:8b:26:79:b6:46:
                    0f:18:ba:c5:1f:4f:98:df:31:fc:2f:f6:8a:4c:23:
                    22:e3:28:85:f9:d1:15:ee:1f:9f:84:63:b3:c3:60:
                    33:fc:3f:15:b8:a8:bd:e6:fa:e3:0d:b8:96:82:f7:
                    5b:58:52:3d:eb:04:ff:65:82:24:74:b4:98:36:e8:
                    e3:cf:a5:54:97:8d:31:a8:37:0a:03:17:1e:9c:67:
                    38:88:ae:1e:7e:58:8d:9e:be:d1:e1:50:27:de:e3:
                    b8:59:91:d0:0a:2e:24:5d:50:24:79:ac:a7:00:d4:
                    af:ff:73:a2:c7:42:ba:28:76:43:eb:af:62:5b:ab:
                    99:12:57:21:41:b7:e6:a2:64:49:ca:ad:be:e7:3b:
                    6c:51:57:11:71:b2:13:ab:3f:33:3c:6e:d9:cb:06:
                    98:d2:ca:91:c3:77:4f:37:2e:ba:3b:9f:97:b5:96:
                    f0:c5:e9:b4:56:98:85:b8:3f:7b:05:d2:2f:be:2c:
                    0f:c4:b4:87:59:ec:66:f1:f8:54:51:13:35:ba:0e:
                    c4:38:a3:f7:69:03:c4:40:93:5e:41:f5:f4:1b:65:
                    aa:da:d1:61:13:eb:58:3a:4b:0d:c4:ce:58:a1:1c:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:B1:37:A4:FA:79:B2:B2:B5:AB:D0:B2:3E:6D:6A:FF:8A:43:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:f8:64:11:07:99:3e:c0:1a:e1:c7:74:1b:c8:1b:79:f0:
         37:0f:e2:8f:66:73:9a:25:98:af:47:f1:3a:43:af:45:dc:2a:
         00:de:44:d3:b4:63:f2:84:3e:4a:52:99:a4:cf:1f:81:11:cb:
         d2:8e:96:11:47:77:ce:58:43:37:17:68:5b:1c:05:4a:45:a7:
         ad:6b:a8:cb:c4:eb:5a:e5:6e:c3:f6:3d:e0:46:48:b6:6e:08:
         7e:55:59:0c:35:2f:3c:58:92:05:6a:93:e6:2d:a2:cb:45:06:
         19:5a:3b:fa:f4:b1:01:59:a1:06:1c:1d:51:29:3b:3c:55:fd:
         e1:05:8f:b0:5c:19:3a:e5:8d:ed:99:85:f8:ce:ee:54:93:54:
         4d:33:74:b7:2e:69:fb:0c:9a:74:93:47:d9:f1:00:b6:25:52:
         ed:d9:a2:56:63:5b:a9:1a:d7:57:7d:20:2e:ea:e6:35:71:ba:
         ac:43:a4:34:02:f5:0e:71:6d:50:61:5f:e7:88:df:e6:68:5e:
         c3:80:30:91:64:73:ee:fd:8c:b2:de:db:9e:2e:16:8e:68:46:
         6d:27:28:87:ae:08:0d:cb:45:5b:2d:88:6e:f1:00:9a:d0:34:
         d6:8f:83:67:b0:66:df:ee:57:e1:55:db:0b:d6:18:31:ee:d3:
         b1:73:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:25 2025 by rpki-client