Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa
File:                     d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json)
Hash identifier:          zGUYJPfILR2xwwTmoEgL5dlVDj2sE6WeORRoWt83YbI=
Subject key identifier:   52:0F:18:84:B0:71:4C:21:E3:8D:3A:4B:9F:39:D8:AB:79:A4:23:03
Certificate issuer:       /CN=a5e2d89d-6269-4405-9578-836517825b32
Certificate serial:       010D0C9F432858487325ADC501BFE4F996192F00
Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     13347
IP address blocks:        67.223.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ad:c5:01:bf:e4:f9:96:19:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=deb22fb1-ee42-4620-9e11-ea7f95772b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:56:31:60:06:73:58:25:fa:04:82:0a:25:
                    1e:bc:21:14:18:d7:f3:28:63:bb:2a:01:73:f2:63:
                    71:f9:f3:a8:3b:c5:b8:dc:b4:0a:7d:e8:eb:3a:18:
                    38:5b:27:27:30:fb:35:17:ea:8f:94:a7:79:4c:db:
                    e2:47:83:de:be:9a:28:69:53:39:b0:51:5d:0a:8e:
                    71:cc:9b:da:3f:77:ff:64:2e:33:9b:16:c5:35:56:
                    5b:b4:32:6c:1a:92:d6:23:7c:39:24:f9:e8:57:c4:
                    3f:cb:46:01:09:a1:1b:a5:cb:d4:7e:ef:53:53:dc:
                    92:78:45:0a:12:5e:44:da:1d:77:11:d1:f2:9c:2e:
                    10:ce:7b:11:71:fb:73:5f:20:35:eb:e0:dd:94:c6:
                    bd:2b:63:56:a8:80:0a:0c:a2:f5:b0:08:cc:7b:c1:
                    38:2f:44:bb:a5:19:c7:0e:1f:25:f1:92:20:d0:86:
                    5c:8e:4c:45:83:3c:6f:98:eb:47:a4:62:66:a1:92:
                    7e:11:ee:06:40:5d:9e:f9:ea:b1:88:14:04:e3:0b:
                    2b:cb:09:9f:62:f8:71:ee:fe:28:2d:ce:34:b0:b5:
                    dc:ec:51:52:2e:89:a5:28:17:42:ce:89:ae:26:db:
                    af:42:e3:9a:ca:d5:f1:da:f9:85:95:25:b8:8d:4a:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0F:18:84:B0:71:4C:21:E3:8D:3A:4B:9F:39:D8:AB:79:A4:23:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:c6:30:87:79:34:a0:fd:67:51:85:11:c0:de:1f:d4:de:
         ae:36:6e:98:76:84:50:61:b1:38:02:53:ef:43:c6:f6:d2:f5:
         2a:61:a8:a5:30:01:5b:6f:d3:47:58:21:d9:04:47:6f:50:9b:
         79:a5:01:d8:08:06:b1:1b:1b:ee:6c:be:65:d4:ce:eb:fe:c2:
         47:bc:e4:71:d6:f2:da:39:a4:d2:bf:4b:ab:c3:c3:16:17:45:
         92:d2:a1:44:23:8a:75:8e:2c:d4:1c:ca:c0:bf:ff:ab:d0:44:
         3d:88:9c:d0:00:b9:ef:6f:43:29:73:f5:8b:11:97:c1:77:df:
         b7:b7:ad:26:b1:a6:b9:e0:75:7a:90:05:cb:10:d7:64:a1:23:
         e5:51:48:a6:f2:cb:c6:fe:3e:ea:6c:56:c5:07:c0:7c:10:72:
         9b:87:ef:8c:92:ed:d4:85:0e:2d:cd:b7:03:f5:db:0a:a7:18:
         96:79:dc:85:86:e7:7c:a8:a4:19:ac:b4:70:91:46:d3:0b:6d:
         63:b7:78:fe:63:06:f8:99:88:1a:a5:f2:80:53:2f:b0:4a:05:
         81:2a:9c:f1:81:97:32:cb:46:94:49:1b:c4:c3:f1:3f:fc:fd:
         10:53:6e:f9:42:02:9e:8d:85:73:0a:ca:f6:86:40:2a:0f:43:
         46:aa:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:27 2025 by rpki-client