Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/4e7a7f53-c7ea-333a-850f-7d5056da4e12.roa
File:                     4e7a7f53-c7ea-333a-850f-7d5056da4e12.roa (raw, json)
Hash identifier:          dT+NNSseNqjuTH5C+DziWd3ylyYOoE1Da7ZnMxtPZuY=
Subject key identifier:   71:76:63:E5:D0:D9:3C:36:25:8E:31:6C:31:D1:42:2A:34:7C:D2:07
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584829448F35C1A2215C13FC3480
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/4e7a7f53-c7ea-333a-850f-7d5056da4e12.roa
Signing time:             Tue 10 Dec 2024 14:53:10 +0000
ROA not before:           Tue 10 Dec 2024 14:53:10 +0000
ROA not after:            Mon 10 Mar 2025 13:53:10 +0000
asID:                     0
IP address blocks:        169.145.32.0/24 maxlen: 24
                          169.145.37.0/24 maxlen: 24
                          169.145.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:44:8f:35:c1:a2:21:5c:13:fc:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Dec 10 14:53:10 2024 GMT
            Not After : Mar 10 13:53:10 2025 GMT
        Subject: CN=d6c0044f-fc45-4fc0-b334-50a0ef0a17ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:dd:c2:3f:3a:db:c8:b9:cc:a7:f9:00:73:
                    cb:e8:1f:14:7f:26:84:4a:5a:9e:c4:de:a5:51:16:
                    01:b6:2b:4e:33:76:26:bd:d7:d9:be:9d:1a:f8:d9:
                    84:50:ee:36:3f:e2:d1:10:e2:8e:5f:59:ba:be:fd:
                    8e:0a:9c:0e:c4:ed:7f:b4:47:9e:7b:6a:d5:3f:22:
                    ba:70:c4:1a:37:3b:da:9c:80:0b:71:83:8c:aa:9e:
                    53:89:9b:55:c1:4a:5a:76:57:93:94:f2:0b:86:19:
                    c1:9e:23:03:cb:27:ec:11:cb:c7:a7:a7:fc:f2:0b:
                    d8:f9:00:7b:a5:cb:c3:89:05:de:80:f4:3b:40:cf:
                    cc:37:d4:c8:5b:2c:78:a8:5a:48:34:06:45:41:47:
                    3c:52:44:44:25:4b:93:af:7d:27:d7:6f:21:69:c5:
                    ab:cc:22:39:54:f6:78:1b:42:d6:33:5c:23:44:00:
                    7e:43:7e:64:2a:fa:50:f8:6c:3a:14:d5:54:cd:42:
                    0a:ae:8d:6f:47:b8:38:cb:a0:0f:27:c7:24:6f:fc:
                    3a:10:8e:19:44:b5:9a:00:96:cd:bb:27:c6:f1:c6:
                    5f:33:e3:ba:0b:24:4f:c9:71:8f:0b:cb:e0:98:9a:
                    1d:4c:66:3d:6a:dc:ff:ca:19:6e:9f:db:d0:cd:a8:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:63:E5:D0:D9:3C:36:25:8E:31:6C:31:D1:42:2A:34:7C:D2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/4e7a7f53-c7ea-333a-850f-7d5056da4e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.32.0/24
                  169.145.37.0-169.145.38.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:14:a2:b2:04:7b:bf:8b:d2:f8:35:1c:46:43:aa:89:32:
         f7:80:7b:9a:6e:90:da:2a:f4:2a:41:25:2c:9c:4e:07:db:5d:
         91:b1:29:ae:77:fd:54:04:66:c8:24:63:29:16:0a:49:66:82:
         1e:ec:11:a8:8d:a7:49:25:66:d2:20:e3:e8:b5:7f:6f:cf:0c:
         d9:6d:82:63:27:23:af:a0:2e:0d:82:6f:ba:f8:4f:5d:60:e4:
         7a:d8:fe:62:de:5a:36:02:c4:f5:d5:f1:fe:04:f4:98:4a:61:
         42:34:e5:42:94:8d:f2:1d:4c:a4:4f:6a:40:30:6c:5a:b6:3c:
         a4:ba:f3:4a:a3:ab:c3:e4:22:fc:3a:36:78:b3:5c:26:b0:1a:
         af:87:8a:9b:69:c7:11:26:06:67:71:02:3d:c0:ed:4c:b3:88:
         26:84:d8:83:e5:c8:16:24:fe:6b:22:1c:d9:72:ac:22:31:6b:
         af:59:35:16:25:82:22:e5:b5:04:59:48:5e:8b:d2:de:99:8e:
         8e:64:79:ae:99:fc:26:09:04:9f:d3:15:13:6d:cb:0a:01:f4:
         95:ab:89:db:74:16:2f:69:c1:5b:9a:c1:ae:7c:fb:94:94:f3:
         4c:c4:f6:23:83:70:2d:40:fd:99:92:4c:ac:50:13:a3:86:4e:
         24:59:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:12 2025 by rpki-client