Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa
File:                     4c716190-ffd4-3aa3-ad30-091c1340b61f.roa (raw, json)
Hash identifier:          bLJ4IuSD+btgk5TiAzB76H5KOE0je8E0qCM1Qo9a59A=
Subject key identifier:   98:90:93:C6:D7:FC:6A:B5:43:E3:62:57:65:75:17:FC:C6:0E:A5:DA
Certificate issuer:       /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial:       010D0C9F432858481EBC611B1183EE5719E073D8
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa
Signing time:             Fri 06 Dec 2024 20:20:42 +0000
ROA not before:           Fri 06 Dec 2024 20:20:42 +0000
ROA not after:            Thu 06 Mar 2025 20:20:42 +0000
asID:                     40230
IP address blocks:        162.0.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1e:bc:61:1b:11:83:ee:57:19:e0:73:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
        Validity
            Not Before: Dec  6 20:20:42 2024 GMT
            Not After : Mar  6 20:20:42 2025 GMT
        Subject: CN=b188ba9d-c5ab-4c3f-a1cd-318f7a7d1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:af:9c:7d:89:eb:47:ae:81:17:bf:58:cc:
                    7c:45:72:03:46:51:69:c0:9f:9b:c9:95:32:1f:b5:
                    df:de:1a:00:3b:de:20:83:35:e9:29:fa:a2:30:2c:
                    78:88:71:70:07:bd:2e:88:23:38:63:58:8b:09:10:
                    90:bf:ea:43:84:61:ce:8f:8d:f3:50:a6:c0:98:ad:
                    ff:14:55:72:6e:1f:79:7b:c4:63:09:44:c9:11:df:
                    37:15:d0:a2:18:31:e4:f5:e9:88:b8:ea:86:a2:eb:
                    e7:f8:37:6c:cf:97:f4:f1:22:e9:4b:7b:26:83:cd:
                    de:27:00:92:a9:c7:0d:b2:60:f0:a3:74:e4:9e:f4:
                    80:c9:db:88:11:fe:dc:f5:d5:74:c4:28:47:99:29:
                    1b:cc:56:85:35:a8:aa:23:21:89:b7:c9:76:1b:0d:
                    3d:a5:1d:e6:8d:41:6d:a3:33:21:4b:02:af:7d:f5:
                    cb:da:ac:87:ea:8d:8a:70:1e:83:ef:9e:a2:af:38:
                    d0:c1:3c:47:54:5b:ee:13:d8:e2:15:e4:91:49:4b:
                    00:04:10:76:2e:ae:54:21:5c:a1:f1:16:02:5e:dd:
                    ab:07:9c:71:12:cf:ee:19:5c:43:24:85:ed:ff:6c:
                    a5:09:9e:0e:38:ad:ae:78:0e:fe:18:d6:ce:24:11:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:90:93:C6:D7:FC:6A:B5:43:E3:62:57:65:75:17:FC:C6:0E:A5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl

            X509v3 Authority Key Identifier:
                keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:db:1e:9f:4b:cc:6f:d3:64:a8:47:2e:bc:95:cb:3e:42:
         09:3d:ec:9f:58:9e:34:d3:ee:98:0d:42:0f:8a:7c:32:8a:24:
         3c:71:f8:d0:08:9d:8e:81:09:4f:9b:e4:53:b8:37:f5:18:84:
         ab:63:f0:05:db:10:90:3c:7a:f8:f1:97:62:dc:9d:7d:5a:90:
         e1:04:d3:df:03:f4:55:fd:b4:62:53:f0:78:db:bf:48:34:2a:
         fc:bb:0b:d1:bf:98:ce:6b:7b:dc:2a:90:09:d2:f0:5f:77:51:
         8e:c0:fe:1c:1b:10:f7:a6:d8:b2:9d:c9:63:73:88:41:c1:51:
         db:57:69:80:43:1e:9b:52:91:2e:2c:85:ad:40:84:d4:0b:80:
         f5:09:f4:7e:6a:f5:28:76:ba:59:7c:6f:cd:23:be:ac:76:30:
         df:4f:52:d6:e3:60:64:5d:13:ef:74:35:8a:76:ad:d0:82:9b:
         2b:6b:bd:4d:7d:3c:f6:a7:d3:5b:2f:d1:47:dc:83:86:e7:54:
         b0:68:e0:a6:e8:2b:29:26:70:10:2b:f5:9b:ef:3b:d2:3f:45:
         df:2d:58:d0:e3:de:22:fe:f7:17:c9:3f:d9:b0:e5:6f:0a:0b:
         75:fe:80:9d:f2:f4:23:46:30:8d:23:ff:27:a5:61:29:b6:80:
         c3:3b:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:34 2025 by rpki-client