Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa
File:                     8810de1f-a392-3d60-8edb-e6eed27b2547.roa (raw, json)
Hash identifier:          W73EfrT9iFPWVEXRcxZM1CCOStTS55vfCLbsehrl2Mw=
Subject key identifier:   C1:76:97:04:26:45:C4:9B:55:E3:D7:A1:14:B4:76:19:BB:49:87:AD
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584839EAB60A16612EBF6DEBCD80
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     398343
IP address blocks:        167.253.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b6:0a:16:61:2e:bf:6d:eb:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=7f04b2a5-c564-4bc6-a2ac-8718c09ff338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:60:88:9d:6f:7f:4f:3e:5d:b1:94:7a:a0:
                    7e:c2:ed:5e:9e:56:62:d5:64:7e:be:5d:50:3c:81:
                    16:6a:f8:d6:98:a5:5f:43:39:f0:10:e9:dc:76:43:
                    96:6a:3c:ec:29:09:3b:23:4c:75:bc:d3:1c:1f:b3:
                    b4:f0:f1:5b:ac:e3:7b:a6:28:00:5c:2a:e2:d8:bb:
                    d2:36:32:6f:3b:c6:44:24:96:b6:41:f4:ad:d2:99:
                    10:be:b8:77:c7:2e:a4:00:50:9e:e3:29:2a:df:94:
                    cd:aa:a9:2f:2a:02:f1:85:9b:65:11:de:15:2d:97:
                    1c:ed:2c:08:12:b7:e6:e8:32:52:07:be:34:5b:7a:
                    1b:03:f0:f0:89:25:c9:86:3b:aa:1e:41:4c:a5:f7:
                    de:ff:7a:72:b5:fb:78:cd:93:26:71:f3:34:22:cb:
                    67:54:e7:22:5d:02:56:e4:b7:83:3b:31:90:23:15:
                    c6:d9:7d:62:b2:55:3f:fd:d8:d8:35:3f:4a:69:70:
                    f1:cc:81:59:ac:ba:90:0a:09:7d:2b:a5:77:f5:47:
                    47:9c:8a:28:fc:6b:cd:01:e6:ae:74:51:25:37:79:
                    6a:98:81:d4:73:41:b2:7a:08:ad:a9:4a:4f:5f:5f:
                    20:87:08:27:ec:9b:42:22:22:1f:aa:e6:bc:e9:77:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:97:04:26:45:C4:9B:55:E3:D7:A1:14:B4:76:19:BB:49:87:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:71:ce:5d:8e:0e:96:ec:64:ee:a8:55:23:b6:d7:71:a2:71:
         15:b6:8c:e6:bd:ab:96:2d:72:4a:2c:19:dd:f2:8b:33:3f:90:
         4c:2a:a9:71:d3:2d:f8:69:3f:62:24:1b:d3:b7:14:c2:10:dd:
         8d:5d:c6:b1:08:d7:69:46:f7:52:25:ad:ad:16:1d:22:68:a0:
         0b:48:16:2d:2f:7d:4e:3c:28:66:6c:33:90:a5:56:89:d5:7c:
         2f:a5:d5:3d:18:73:ff:81:98:c6:96:39:c7:6f:89:c5:8c:c8:
         5f:e2:cd:b6:d0:e2:44:31:2b:56:77:f5:5a:20:2f:83:60:69:
         24:2a:ad:7b:e1:17:e9:97:09:b6:38:ed:b9:39:a6:61:be:71:
         e2:88:85:2b:63:7a:76:6b:5b:19:f9:09:ce:0f:b8:a7:cc:46:
         26:97:61:92:2c:5b:89:10:97:c5:dc:f5:a4:25:44:ce:65:cf:
         2b:6b:db:e2:8a:6a:f0:63:4a:07:c6:f3:cb:03:fa:47:6c:15:
         7b:3f:9b:01:33:72:a4:e7:ee:a4:3b:86:37:4f:56:10:3e:a6:
         0b:17:7e:cf:ce:6d:3a:6a:bb:af:6c:b7:a5:4c:9b:49:50:6b:
         20:29:6f:92:06:58:ad:0a:fe:a3:56:71:16:65:b2:24:46:5d:
         19:d4:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:12 2025 by rpki-client