Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
File:                     efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json)
Hash identifier:          JdXYtjNHcUIR0V/NkZTaiAt5dQ22JoYCOgdfJ4z/9I4=
Subject key identifier:   DF:7D:C0:D2:13:92:96:B7:2A:8A:59:7C:E3:7D:87:81:02:F8:18:22
Certificate issuer:       /CN=7054e196-fda1-4988-82d5-4d2f5013150d
Certificate serial:       010D0C9F432858482EC004E9A2F1BD0776441300
Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     14648
IP address blocks:        170.39.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:04:e9:a2:f1:bd:07:76:44:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=acbe2c6f-f675-406c-88ff-0651da17ae17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:a4:8f:33:c9:03:c5:09:a7:b9:0e:66:3b:
                    5a:ed:36:7f:80:9b:bb:96:29:5b:85:18:23:4f:27:
                    6c:d2:be:73:09:f4:23:fe:76:b5:2e:5d:52:9c:db:
                    82:17:b0:55:75:fb:35:b0:6a:7a:87:5f:b2:83:0d:
                    00:36:39:be:df:c3:12:fe:37:32:46:61:11:f9:39:
                    34:a4:00:5b:e4:56:a1:37:dd:5f:e3:64:b4:76:c4:
                    5a:1e:51:73:99:97:46:cd:53:0b:2c:fa:bd:02:0d:
                    e9:0d:2f:d1:84:ca:45:dc:f2:f3:60:72:12:88:75:
                    81:42:5a:3e:4d:10:00:f6:22:0d:93:4c:68:fa:53:
                    9b:f5:91:48:20:ab:f1:48:b3:90:91:94:a8:96:65:
                    74:09:d5:6a:23:f4:da:b6:40:b4:bc:17:2f:c3:91:
                    9b:1c:d9:f8:2a:a2:8f:5e:6c:38:cd:5f:6e:15:8f:
                    30:17:66:99:dd:e7:8c:49:20:24:00:9c:33:28:72:
                    5a:e9:da:e4:fa:5c:3d:20:69:b5:4a:f8:bc:dc:c8:
                    54:74:88:ae:70:c7:a5:bc:a1:de:8a:1a:45:82:b5:
                    60:d8:28:03:d2:36:2e:23:04:0b:b6:5c:a0:fa:f0:
                    e9:a2:39:5c:14:78:51:e6:ec:c6:7b:a6:05:77:b6:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:C0:D2:13:92:96:B7:2A:8A:59:7C:E3:7D:87:81:02:F8:18:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl

            X509v3 Authority Key Identifier:
                keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:26:d7:7f:64:bb:9c:c2:00:d0:86:3d:bd:2d:c5:e1:ea:1a:
         b5:6f:10:7a:cf:1c:00:1c:f3:72:05:1e:42:65:99:77:e7:98:
         45:90:24:e3:1b:a4:68:9e:4c:d6:f1:1e:4c:21:16:1d:f8:a3:
         63:82:c4:95:45:6d:1e:6d:ab:5e:3c:1f:52:a3:b2:ee:ab:16:
         5a:d6:51:ed:e0:fc:ef:86:e0:fd:c2:2e:bc:d5:ab:39:0e:b5:
         69:19:65:df:c1:72:75:c8:1b:db:6b:f2:1e:03:8d:60:51:20:
         49:7f:0d:e6:a2:23:a3:10:0d:b9:20:ab:8f:68:a8:94:d2:78:
         86:54:51:fd:83:cc:e6:96:7c:1f:b9:12:e4:f8:b2:1e:57:d2:
         3b:5d:26:45:18:01:e5:dd:6e:30:1b:ae:a4:46:61:90:85:c3:
         0b:0d:02:db:49:6d:3d:58:64:82:68:61:19:32:aa:8f:0c:c5:
         c4:8c:13:55:95:ca:2a:d3:d0:a1:d9:0c:38:ad:92:87:a0:ab:
         d9:81:ce:a6:05:de:3d:ab:82:86:7e:96:4d:2d:df:af:ab:12:
         99:d8:8a:c6:66:c8:b7:12:93:17:05:68:b8:f0:62:22:77:c5:
         45:45:ae:0e:c0:68:14:ed:48:28:d8:da:bc:29:11:3c:0a:4b:
         57:5f:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:00:46 2025 by rpki-client