Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
File:                     eec7e59a-4606-3c68-bc4e-0c0848b41897.roa (raw, json)
Hash identifier:          uilPcz4PgQbA3IU0iZGivM67jDUcdg2cGjz4FLaWszU=
Subject key identifier:   1B:31:F0:D3:0D:6D:60:7E:55:E5:48:70:DD:A3:FB:B4:02:CF:DF:FD
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858486695BF13569FFDC3B1C79018
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     210873
IP address blocks:        16.2.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:bf:13:56:9f:fd:c3:b1:c7:90:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=41210530-7cc0-4967-8112-32f66532bd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:68:ff:c9:bd:5b:ce:59:43:65:e4:73:1d:
                    66:ca:56:90:d8:92:01:4d:8d:b1:14:c8:88:58:3a:
                    1b:ce:95:53:7a:c6:d1:d8:37:ee:9b:e2:07:dc:f7:
                    6a:fb:c1:7c:03:70:13:17:d6:21:2d:c2:02:71:99:
                    8e:f9:5c:bb:5b:64:dc:95:38:53:19:ae:0a:3f:ca:
                    ca:4c:b0:ec:bb:93:13:ee:76:08:e6:ed:a7:64:8d:
                    2f:73:2d:35:3b:6c:7b:e2:62:7d:1f:29:2f:d6:b1:
                    8d:02:b1:91:5e:25:2e:10:7a:d7:fc:98:ce:68:7e:
                    7b:8f:7c:cb:e7:7c:bf:86:d9:c1:07:c2:89:28:ee:
                    32:49:b0:5e:d0:90:8b:a1:66:8f:94:a8:5d:29:0b:
                    de:9b:a0:03:e7:a9:38:1e:e6:dd:71:85:56:f5:d0:
                    e9:27:c5:44:38:ec:31:e8:b7:3d:09:c1:f0:f2:6d:
                    46:61:05:04:2a:28:a4:cf:ad:ce:e2:73:90:23:38:
                    5f:d6:23:4c:0a:9d:b7:89:94:b9:a4:59:86:98:d2:
                    00:23:19:51:33:0e:47:58:e9:11:23:83:c5:9e:50:
                    bc:f3:ae:02:89:69:49:fb:00:c5:12:3a:93:60:68:
                    05:ac:3a:15:25:fe:5d:07:a2:ba:3a:fe:de:f1:38:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:F0:D3:0D:6D:60:7E:55:E5:48:70:DD:A3:FB:B4:02:CF:DF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.2.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:da:ca:23:0a:04:60:42:53:b1:38:36:55:b7:ae:70:70:
         cd:38:61:65:5e:59:cb:4a:36:49:ad:1c:ee:7a:c4:38:fe:f1:
         e8:27:9f:e6:18:25:66:0b:33:0d:01:e2:1b:3f:d8:30:94:60:
         f9:6a:ef:9e:44:c5:a7:e9:75:81:2f:7d:aa:5b:c7:c9:3b:d4:
         d3:28:83:76:64:52:bf:15:75:50:38:07:9b:1a:c9:55:eb:31:
         d2:62:99:5e:1d:7f:da:cf:78:ec:c3:3d:5c:7c:f0:33:f8:49:
         46:95:c1:e9:5c:c6:27:6b:9a:fe:c8:c4:11:17:5b:cf:f9:1b:
         13:ec:e7:85:e4:06:c7:d9:6c:93:dd:cd:04:75:f2:09:85:83:
         80:f5:5d:a8:f7:16:00:b3:64:78:82:0b:c6:32:a0:31:f3:9d:
         9c:0b:fd:9d:dc:5d:5d:78:96:86:6b:a3:0c:01:57:65:24:5f:
         d1:83:a7:77:f6:33:cf:63:93:ed:c7:e8:2e:ef:7f:78:b5:c6:
         4e:21:01:5c:32:ae:46:e0:e2:d5:98:7b:4c:9f:24:6c:91:35:
         0a:c2:a5:d8:a9:3c:e5:1b:f6:79:70:a7:ba:d5:5b:17:4f:3e:
         2c:1f:f5:a4:a5:51:78:60:01:78:12:8b:18:64:c0:aa:47:97:
         ab:3f:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:20 2025 by rpki-client