Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
File:                     ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json)
Hash identifier:          OpV1QJR5+LTL5jlvsN5aCWm2ObEwajjno6GvzCmuEMA=
Subject key identifier:   BE:5B:86:DC:C5:10:5E:6D:B3:C3:9D:EB:E2:87:11:CC:18:72:DC:00
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F43285848159FF33CC7584CA2F9944B80
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        81.199.64.0/20 maxlen: 24
                          121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f3:3c:c7:58:4c:a2:f9:94:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=c898e120-8c57-49f8-b4f1-f42413951f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:44:97:b5:7e:3c:62:c9:0e:31:16:56:2f:
                    f6:66:31:73:d5:c0:92:d4:fe:50:3a:0e:c0:cd:83:
                    98:da:be:7d:1f:70:ca:f6:0f:2a:f9:22:3f:b1:4f:
                    72:59:d5:d3:7a:a5:a7:2e:90:32:dc:d2:0c:d0:3e:
                    4f:63:69:57:ff:f1:5c:18:bf:ef:93:b4:b2:a9:fe:
                    16:6e:b0:00:28:4a:0c:41:13:40:67:cf:50:76:44:
                    55:3d:96:52:fe:49:33:72:e5:18:47:e0:c4:e9:03:
                    14:09:a1:9c:a1:49:aa:03:7c:35:a3:c2:e3:19:85:
                    11:18:48:ab:8e:c1:ce:9a:68:16:16:e6:75:b9:20:
                    d4:48:ea:21:00:6e:79:b6:cb:50:23:67:e1:8e:32:
                    49:53:ab:65:3c:07:d0:03:ab:39:aa:b3:08:b7:72:
                    a5:05:1f:9e:a4:1b:a1:09:9d:e3:01:a9:c2:e4:ca:
                    17:2f:19:2e:bb:3d:65:6e:0b:ff:f6:ff:eb:3a:4b:
                    05:3b:f1:8d:af:52:fa:e8:04:a1:be:dc:8f:ae:86:
                    ac:10:26:15:26:5b:c4:1c:40:61:af:7d:be:56:69:
                    6e:02:39:58:b7:d6:0c:2e:b1:21:bd:04:ac:29:ed:
                    5c:97:85:67:3a:b2:f7:7c:50:75:80:d7:76:1e:a6:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:86:DC:C5:10:5E:6D:B3:C3:9D:EB:E2:87:11:CC:18:72:DC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.64.0/20
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:2a:8f:ce:31:84:3d:c8:83:76:2d:23:17:50:91:87:a3:
         c1:a4:3c:6b:4f:1f:f6:77:d0:73:78:20:bb:ac:5a:00:ba:94:
         a1:d4:37:6a:6b:25:a2:f2:22:60:10:b4:df:87:04:9b:33:6a:
         ef:df:73:21:4e:49:2f:d0:27:5a:66:29:35:02:cb:ea:3f:da:
         c8:60:c7:ed:94:d5:de:5c:1a:79:1c:77:c6:2d:27:84:9d:b4:
         64:2c:7f:c1:2a:1e:ce:8b:51:cd:d7:1a:f6:6e:7d:61:83:23:
         34:e6:ac:f1:9b:0b:9f:6a:6f:93:a9:9c:ed:59:03:9c:4a:19:
         99:9b:07:42:e4:59:46:bb:f9:59:fa:b5:0c:33:09:2c:c6:77:
         ef:e6:b0:99:e5:ad:9f:c5:3a:15:d7:ce:ec:f8:4c:14:44:b3:
         e5:e8:bc:e3:d9:eb:c2:d9:49:1d:fe:a3:d5:50:57:00:bc:8e:
         90:a5:e2:ad:10:96:ef:5e:23:f6:08:89:cb:74:66:83:f3:54:
         5d:c6:77:47:5d:3c:be:f5:0e:7b:0b:b6:40:90:d0:43:2b:0e:
         d3:16:3e:71:91:a3:16:1a:3a:c0:5d:5d:19:c9:26:c0:10:2d:
         c0:72:37:87:08:ff:8d:fb:d7:71:12:b2:46:c2:b1:70:9b:62:
         6e:e3:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:52 2025 by rpki-client