Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa
File:                     7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa (raw, json)
Hash identifier:          kMS4CSMhavAqNur04zsmmBi9EVVcoC22Bj4F8uq2pZk=
Subject key identifier:   29:2E:9B:0F:82:EA:37:6E:03:87:08:12:E0:E8:D2:C3:0F:29:AD:C4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858489075EEE802510AB7FE4AD080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     9009
IP address blocks:        172.94.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:ee:e8:02:51:0a:b7:fe:4a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=a5a73d34-865e-4c3e-a820-34949f045838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e8:78:1a:50:50:3c:38:11:d7:f2:56:56:47:
                    06:d4:3e:b9:7e:d0:27:01:8f:a0:18:29:f2:14:0e:
                    bc:57:26:82:73:59:00:8c:cc:68:b6:bf:f4:66:f3:
                    ad:37:46:ff:8b:3d:24:68:84:4e:ca:59:3b:d3:a7:
                    1c:52:85:02:e9:5d:87:07:f7:24:ae:66:ea:e3:ad:
                    34:39:87:31:93:ca:b5:06:37:9f:a9:f6:de:af:56:
                    ab:f3:be:c8:3a:d3:85:b6:29:7d:e6:d8:b3:00:62:
                    b8:ce:7f:f0:68:4b:66:c8:cf:d2:d7:8b:f9:b3:c3:
                    7d:2e:2f:bf:da:3f:d9:5a:8d:22:0a:de:d3:54:6d:
                    72:0d:b7:78:a1:1f:bf:2b:fe:c8:43:e2:6f:a0:f6:
                    00:8d:0a:ca:8d:24:2e:5f:c1:4f:c5:43:fa:74:8f:
                    07:04:e6:dc:81:f6:d2:db:14:9a:fe:05:76:2f:18:
                    e7:b9:6f:82:94:ba:67:eb:4b:2b:20:de:40:17:61:
                    d4:04:14:68:58:29:b3:b2:28:d7:da:3d:a3:b4:52:
                    63:b2:58:c2:4a:da:b0:7f:24:ac:1e:b3:3d:2c:b3:
                    e7:63:a4:17:fa:e4:0e:59:ab:6c:6c:f7:9b:b2:1b:
                    65:31:51:85:10:32:95:fc:38:4e:09:2b:86:a8:96:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2E:9B:0F:82:EA:37:6E:03:87:08:12:E0:E8:D2:C3:0F:29:AD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:d0:1f:58:87:58:e4:0d:47:2c:c1:ce:2b:2e:88:5c:b3:
         94:5f:49:74:e7:62:6d:76:4b:2e:79:8b:b1:b7:e3:17:be:44:
         fa:45:1c:29:0a:cc:b2:91:e6:74:d0:53:e7:87:20:b3:ae:80:
         28:e3:d4:7c:57:cc:cd:24:fb:04:a3:8a:d8:e4:11:f5:20:63:
         e0:58:ef:28:5b:db:3e:41:23:1e:4d:01:c2:e1:b4:c8:e1:52:
         7e:e9:c0:d1:23:1c:bb:66:c5:6d:0f:55:1d:13:9e:80:e5:f7:
         1c:0f:d2:69:89:84:3e:6c:25:92:92:17:eb:14:e9:a6:d4:c1:
         1a:01:f9:98:37:75:38:07:f3:89:59:6c:80:3e:d0:4c:88:65:
         56:97:7b:9e:af:aa:e2:90:da:76:90:c9:3d:83:67:3b:76:4b:
         0a:34:d7:b8:1b:63:0c:99:50:7e:05:a9:48:a9:79:ec:ef:7c:
         39:58:f6:4f:29:e2:20:08:84:4f:00:ef:6b:63:50:e3:60:d4:
         ab:71:ab:fa:d6:79:7d:81:55:f1:da:09:35:91:c9:51:42:25:
         cc:1a:4b:18:d2:33:88:f2:02:0a:63:ad:2d:e0:72:f9:c3:85:
         4e:45:c9:35:f6:98:58:6d:d6:1a:96:13:29:2d:cd:5f:f6:17:
         71:ea:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:23 2025 by rpki-client