Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
File:                     af253897-34b0-302d-99ea-bc80edc69de5.roa (raw, json)
Hash identifier:          pe+Y8BLkbVClFuT/3RuN2jcKnOe+UZrXi/DT9ALwfdY=
Subject key identifier:   C0:F5:55:EB:59:FF:41:46:91:96:18:E3:79:C1:F6:AC:10:F2:47:00
Certificate issuer:       /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
Certificate serial:       010D0C9F432858484C102582B0EA3560B1D91C40
Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     32450
IP address blocks:        192.107.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:25:82:b0:ea:35:60:b1:d9:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a11d8c28-ca77-4404-aef9-8358fedb4d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:26:c4:0f:a3:0a:98:c4:4b:ec:13:05:6e:
                    37:d1:95:83:04:c6:dd:49:c1:54:5d:99:74:a1:58:
                    4c:16:84:a5:48:21:ca:4d:a2:38:74:00:32:8e:8b:
                    b3:5b:eb:2a:e7:b5:f8:9f:e7:72:6f:ab:63:32:f6:
                    70:75:08:7a:d0:91:1d:d8:7e:fa:2e:cd:59:b0:db:
                    3f:a1:2e:60:05:50:6e:1f:4f:13:c9:87:56:37:6e:
                    d4:72:ac:39:6e:4e:c5:fc:dd:34:b7:86:04:72:c9:
                    a9:02:97:19:03:9e:82:8e:5b:46:c3:cd:18:e1:33:
                    5a:25:e2:c6:fe:ff:de:e9:a8:c3:1c:88:70:27:8f:
                    ca:66:75:80:4c:d1:be:5d:77:c4:b2:96:6c:39:a8:
                    87:4f:d1:10:d5:85:5c:90:b4:ca:f5:be:47:b4:87:
                    9b:40:0d:9c:4f:32:3f:27:a2:81:43:35:7e:3c:34:
                    31:d1:39:70:b7:f1:47:85:e9:a8:63:c4:38:d3:0a:
                    8d:20:7b:4c:dd:f9:d3:33:48:14:ba:06:cf:c9:83:
                    9e:8f:8b:ba:46:65:1d:3e:de:00:20:1b:47:cb:4e:
                    b1:31:00:18:02:d2:6f:84:58:b2:43:e9:46:1e:f9:
                    d3:a0:c2:16:0d:5f:ea:e7:f8:d1:77:2a:1d:05:a4:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:55:EB:59:FF:41:46:91:96:18:E3:79:C1:F6:AC:10:F2:47:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl

            X509v3 Authority Key Identifier:
                keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:1b:89:e2:bd:60:90:4e:9a:fb:4e:58:5d:8b:c7:fa:12:
         be:e2:52:31:c0:e8:ea:25:65:9d:7e:4e:2f:b9:f4:bf:f8:9d:
         68:e3:bb:03:8a:0e:b1:9b:40:a3:82:62:f9:ae:6d:fe:28:b6:
         45:07:cc:ec:ab:62:7c:26:77:7c:38:10:a9:81:7a:06:e0:be:
         7d:6f:ee:c4:b0:77:0c:e6:05:26:9d:c5:8a:5a:e9:40:fc:15:
         06:8e:53:b4:8d:30:d2:a8:05:a9:88:d8:e1:8b:28:55:24:40:
         40:87:ce:11:c3:8e:fc:ca:dd:75:17:3c:05:b3:3b:fe:23:8b:
         63:0c:e5:8f:eb:27:e2:ac:1f:85:0c:ad:a2:f7:aa:e4:ac:1a:
         fd:2a:bd:54:29:2b:40:5e:e5:69:66:fe:34:12:aa:57:12:11:
         78:e5:15:3d:b1:d5:82:30:4a:b2:2a:9f:30:5e:a2:89:3b:cc:
         f8:e7:c9:44:20:b9:f4:bf:45:05:e0:54:03:68:aa:43:08:62:
         70:1a:3d:b5:96:8d:8d:22:42:cf:52:e6:28:64:9b:92:bc:7e:
         91:fe:03:48:c3:6e:a6:b5:03:8a:ed:91:80:6c:4d:b8:44:1d:
         4a:33:7d:65:c5:f3:4a:d7:7e:71:79:95:d4:09:c5:6f:80:c3:
         5d:ea:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:18:26 2025 by rpki-client