Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
File:                     f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa (raw, json)
Hash identifier:          Mqg4MMlPjo1FdFvPlI/rWRZQwJeRNCcWw3cIHwc21e0=
Subject key identifier:   BC:7A:CF:FD:A2:24:D4:A0:F9:38:D0:AF:29:44:71:CB:57:5E:48:6D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584851A57B90CE1B94702E107A40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     212238
IP address blocks:        172.111.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7b:90:ce:1b:94:70:2e:10:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=f41f8cbb-754d-4f01-b53f-1eb719874366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:53:ab:7b:19:ec:6b:27:ab:1b:e5:ea:09:
                    77:f6:b0:df:d5:25:bb:8c:de:82:08:00:fa:6c:33:
                    ed:ab:a4:94:1e:92:10:59:1e:d8:0c:ef:fe:19:80:
                    a0:f8:bd:5a:20:0d:cc:58:3d:f6:c8:d2:a0:99:c3:
                    6d:2e:02:a2:ad:ba:c9:d8:27:e2:0d:49:9a:ca:d6:
                    26:f8:03:ce:76:27:ba:e4:da:7e:12:84:9e:2b:37:
                    6f:80:fc:7f:12:c8:b2:82:76:bd:08:88:b3:6f:8c:
                    b0:8b:e2:bf:77:f3:b2:1e:19:33:54:38:8d:fc:56:
                    03:c7:15:ca:fc:9a:ff:d0:47:9c:a8:6e:cd:ca:68:
                    21:4d:c5:c6:55:74:c0:ef:99:04:eb:89:86:64:df:
                    9a:69:9a:19:06:d0:5f:a6:42:97:e3:fb:68:cf:61:
                    ee:df:9e:37:56:04:4d:ea:65:b7:ef:5f:85:75:5d:
                    56:b1:68:61:42:b7:94:d3:fa:52:4e:80:6f:05:1d:
                    e9:b6:a5:de:62:d5:f4:df:4d:7e:dd:05:b8:4c:ab:
                    eb:30:b7:11:41:7d:a1:fb:e2:04:60:19:f7:f3:6a:
                    24:69:51:e2:eb:e5:71:b9:12:df:b1:c4:0b:cf:3b:
                    57:a5:06:36:52:eb:70:9e:ea:50:3e:65:55:38:53:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:CF:FD:A2:24:D4:A0:F9:38:D0:AF:29:44:71:CB:57:5E:48:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:19:1a:b6:48:8e:02:10:75:4f:1f:02:7f:59:2d:1c:c7:49:
         37:2b:b5:d5:d6:48:f7:de:d6:79:fc:ca:23:ac:0c:f5:52:41:
         e2:f5:ed:b8:e0:a6:22:d0:67:c1:f8:29:0a:a7:0c:8f:79:72:
         b3:1c:8a:9c:15:33:2f:33:e6:6d:2b:48:ea:9b:57:f6:66:fa:
         1d:21:ed:a6:77:94:92:88:3a:89:ea:23:57:58:5b:99:e0:5e:
         0b:35:41:43:a7:19:89:18:c8:31:d4:25:b9:6d:d5:0c:f8:b7:
         9f:c5:a3:1d:11:e3:e2:7d:ee:13:d8:de:60:7d:b8:26:03:4d:
         34:ca:d2:d2:9d:7c:36:8d:73:07:cc:00:74:c8:ab:a1:d7:87:
         27:80:0b:eb:4b:1a:ef:f4:82:27:0d:66:55:70:20:40:36:07:
         ac:59:c5:2a:0f:81:f2:d3:36:ab:82:50:65:35:e7:a9:7b:33:
         d9:42:e2:bf:e5:db:ee:70:02:b0:75:16:e3:14:9b:33:73:14:
         d1:bc:60:52:5f:94:9b:f1:08:f4:f9:ea:f6:a3:c5:fa:0b:7d:
         16:1c:ed:64:46:b8:38:0c:67:e2:83:58:e7:8c:18:63:f7:81:
         cd:b8:e3:da:41:29:03:09:18:25:bf:8c:1a:93:7e:be:a5:22:
         54:27:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:09 2025 by rpki-client