Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa
File:                     70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa (raw, json)
Hash identifier:          aS5cGpQVg6IUbHCI3lgMDlBlS20vjiX0GQ5YNOg2cs8=
Subject key identifier:   AB:62:62:3A:81:4C:8E:22:84:AE:8D:D3:BC:26:CC:FA:12:94:E2:A4
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847FEC2F4D96F8DA8C20E7B4D60
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa
Signing time:             Mon 25 Nov 2024 09:28:05 +0000
ROA not before:           Mon 25 Nov 2024 09:28:05 +0000
ROA not after:            Sun 23 Feb 2025 09:28:05 +0000
asID:                     16839
IP address blocks:        132.192.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fe:c2:f4:d9:6f:8d:a8:c2:0e:7b:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Nov 25 09:28:05 2024 GMT
            Not After : Feb 23 09:28:05 2025 GMT
        Subject: CN=a8bf19bd-2e47-4474-9e04-27f0357a46b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:d7:5d:ee:48:fc:9e:85:d2:57:16:55:d3:
                    36:ad:96:31:d4:97:8e:96:e8:89:67:da:11:7d:1c:
                    e4:76:e6:1a:79:37:52:84:21:fa:1c:09:09:a8:ef:
                    c6:dd:af:64:09:49:ed:11:6d:5b:bd:80:3b:b8:0e:
                    0b:23:e2:c5:32:3e:45:1f:33:b9:94:86:cf:94:79:
                    b1:9a:27:f0:51:34:71:2e:e4:c2:da:93:1e:19:b2:
                    61:0a:ce:40:64:70:cb:a8:f8:d0:17:55:ac:8e:91:
                    95:2b:36:8b:74:fe:a1:f9:ad:34:0a:b3:86:21:80:
                    97:9b:cf:85:36:ce:fc:30:46:df:9c:8d:58:40:17:
                    07:81:6b:79:97:c8:fb:b5:4e:dd:84:bf:0f:53:56:
                    1a:7f:6e:72:c8:6a:28:aa:86:f2:f5:e3:b3:54:6f:
                    38:9e:62:c7:02:c1:a8:b1:17:60:4c:b2:0d:1d:19:
                    af:31:fb:d5:61:33:8e:74:86:88:31:d5:39:22:c1:
                    72:68:91:be:86:54:69:72:ea:cd:3a:a9:d1:c9:54:
                    40:70:d2:fe:85:c9:2a:a5:f9:20:d6:d5:d8:df:79:
                    54:3d:38:a3:f6:17:6d:17:3f:c2:d8:65:c4:8f:5a:
                    32:40:0e:d2:a7:ce:b1:39:89:93:66:71:56:ba:e1:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:62:3A:81:4C:8E:22:84:AE:8D:D3:BC:26:CC:FA:12:94:E2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:3a:49:aa:23:f9:0f:b8:a9:c8:9f:3f:2a:be:33:b2:3e:
         c6:4b:56:32:11:78:73:fc:27:1d:70:31:f0:de:16:03:32:1a:
         15:b4:83:d9:d7:ce:8b:51:aa:e7:b5:2f:99:f9:b5:1a:d4:f1:
         5f:8d:10:55:45:f6:72:3a:18:a3:27:71:e6:a9:55:ac:cd:e0:
         52:fd:b2:d0:59:25:08:5d:de:71:13:8e:95:9b:3b:c1:15:b1:
         88:7f:72:a4:5c:c7:f6:8c:5f:4c:ef:ed:c6:8a:90:6f:d1:61:
         9c:e9:6b:82:0f:52:2c:22:86:31:25:60:85:fd:d5:49:d7:ed:
         ab:e3:18:6b:cc:88:88:09:02:a7:3c:5c:ff:71:e1:95:e7:c6:
         fa:8d:e6:4d:cf:7c:da:2a:1f:1a:5f:af:39:52:9f:6f:c0:60:
         89:74:62:75:50:48:3a:43:19:27:b3:23:ed:37:51:f2:b3:f5:
         1a:a3:e5:0f:cd:b4:b1:b8:d0:ee:b0:a8:b5:0c:0d:54:47:af:
         a7:0c:ce:5d:c1:7a:aa:66:77:b5:5f:18:82:be:b6:05:62:da:
         15:24:02:3b:e2:15:ad:62:fb:d4:3a:fc:9a:cb:26:02:eb:17:
         65:85:e4:42:61:6e:66:a1:15:ca:0c:4e:30:37:43:6f:ec:fe:
         06:c5:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:25 2025 by rpki-client