Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/77de89f3-c70e-3d60-8df3-4f94a7a9c69e.roa
File:                     77de89f3-c70e-3d60-8df3-4f94a7a9c69e.roa (raw, json)
Hash identifier:          BaWWrIC7yuj8y3SuUqg8eoftrgwYPzJ6CXLPsbRVyjQ=
Subject key identifier:   21:70:62:6F:17:13:97:25:24:C3:2B:5E:64:C8:3D:BB:37:3E:1E:E4
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F43285847E62A218195A51F2628F85FD0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/77de89f3-c70e-3d60-8df3-4f94a7a9c69e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     3209
IP address blocks:        161.195.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:21:81:95:a5:1f:26:28:f8:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=51f2e9aa-2056-4971-92d6-765371e81e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:cf:6a:4c:41:17:80:61:d2:56:25:27:36:
                    44:0e:a6:03:a0:ac:e6:13:3c:3f:f8:14:4e:2d:1c:
                    a7:19:b2:94:0a:82:51:74:ba:41:8d:f0:eb:7a:39:
                    21:f2:f9:6a:a1:3b:ad:e1:16:ce:8f:94:d7:3a:57:
                    8c:10:5e:87:82:b6:30:98:dd:9e:c3:5c:5a:92:a9:
                    f5:66:eb:a7:90:2b:49:0f:85:a8:08:57:f2:f2:f0:
                    2f:bb:46:91:9f:05:74:90:b0:bf:46:4b:2c:6d:28:
                    59:b4:17:24:40:18:2b:ef:fa:8d:2b:03:18:25:f0:
                    9e:63:a8:6d:07:25:a4:63:7f:15:05:d1:0b:c9:aa:
                    7e:1e:46:e4:3e:0b:ef:2a:1e:35:ae:8b:fb:a5:55:
                    d0:d3:4d:98:83:44:0e:83:9e:fe:b7:07:e3:f6:14:
                    c2:81:07:51:ee:a0:13:c4:92:3f:22:1f:c4:db:43:
                    42:cb:3f:77:ee:9d:1d:2b:ae:6e:db:e8:9f:02:bb:
                    f5:93:bb:5f:86:27:9d:b5:a6:75:c7:16:ef:09:2b:
                    80:76:68:0e:a3:ce:54:a4:31:c9:98:ef:58:b4:4b:
                    b4:21:43:2f:2b:46:cf:d9:51:b9:ab:2f:5f:a9:b9:
                    d9:49:c2:cb:36:d9:8e:4b:62:fe:9f:74:f4:b2:32:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:62:6F:17:13:97:25:24:C3:2B:5E:64:C8:3D:BB:37:3E:1E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/77de89f3-c70e-3d60-8df3-4f94a7a9c69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:8d:9d:d3:88:31:8e:66:0a:7f:02:af:e5:b1:e0:22:ef:
         10:2b:30:4a:fe:a2:2d:ab:77:0c:76:54:76:83:65:45:1b:fa:
         9e:78:d3:af:31:6b:68:04:73:05:18:0f:92:8b:86:26:d4:d3:
         a0:18:97:c8:ee:70:af:40:42:e5:58:91:a9:50:4a:47:aa:49:
         13:a0:2e:09:b6:cb:f0:cf:74:75:b1:4a:cb:a4:8c:00:0d:f6:
         a4:86:bd:31:a6:d1:f6:f8:24:8d:69:df:7a:54:b5:3b:c3:8a:
         56:4c:2a:e5:5b:95:fd:4a:33:92:33:25:18:d5:be:aa:6d:8b:
         8a:43:73:fa:51:42:01:b5:a3:7b:29:f3:81:cd:8c:19:68:34:
         6e:9b:87:13:cf:99:ee:01:72:f2:46:c2:9b:0c:22:e5:e2:82:
         50:39:d1:a6:76:f1:ca:75:15:c6:69:e5:fd:be:b2:fa:4c:e8:
         77:85:db:bc:f4:0d:0a:7e:49:d2:fb:c9:a8:c7:3f:88:bc:02:
         61:9c:8c:a2:49:b4:1d:2d:51:c9:84:54:fa:5e:42:0a:e4:59:
         a0:03:bd:ae:ce:51:11:97:ad:d5:29:1f:98:b3:3d:d1:00:a2:
         f0:ff:e7:b1:ab:bb:3e:61:3f:31:12:07:e9:d9:b7:90:ec:c4:
         72:80:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:39:58 2025 by rpki-client