Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9ad8769a-95e0-353f-a7ac-fcd0c2c25285.roa
File:                     9ad8769a-95e0-353f-a7ac-fcd0c2c25285.roa (raw, json)
Hash identifier:          cCfAvi27/GhNGJZRYuSDXAeKXearFJoI7nzPILEsJlM=
Subject key identifier:   90:9A:1A:D3:20:CE:9C:2C:79:68:6D:40:E4:96:19:71:5A:B5:F8:90
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858480861DA325E84BF753ABEF7C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9ad8769a-95e0-353f-a7ac-fcd0c2c25285.roa
Signing time:             Thu 28 Nov 2024 20:10:31 +0000
ROA not before:           Thu 28 Nov 2024 20:10:31 +0000
ROA not after:            Wed 26 Feb 2025 20:10:31 +0000
asID:                     376
IP address blocks:        132.219.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:08:61:da:32:5e:84:bf:75:3a:be:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 28 20:10:31 2024 GMT
            Not After : Feb 26 20:10:31 2025 GMT
        Subject: CN=6317c2a7-d782-4e80-8394-a05cff8b535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:f6:f5:b5:0c:9c:33:ab:e9:0a:f5:92:91:
                    3a:36:f8:90:7b:74:da:f2:a6:8f:40:70:56:13:5f:
                    75:48:8b:2f:d4:3c:3a:e8:88:94:a0:b6:1e:e5:a6:
                    7a:3e:f2:23:81:44:db:16:c3:41:6f:cd:d2:bf:d3:
                    d2:e4:79:08:8c:c3:b6:7d:42:81:6a:65:cc:05:1a:
                    95:c1:60:c5:38:58:58:43:ed:44:b1:82:61:a9:20:
                    ee:65:fd:77:1d:bd:05:01:38:8b:9b:67:84:d2:b1:
                    a7:75:e7:5f:db:60:6e:24:72:aa:25:29:55:d2:44:
                    24:49:64:e7:d8:81:6c:1a:ad:91:75:bd:a7:c4:3a:
                    8b:72:f5:8e:a5:cc:66:de:ca:44:0c:ce:8f:d7:9f:
                    d4:83:89:09:f3:cc:52:e4:ff:57:49:34:d3:6e:5c:
                    77:32:a2:7f:40:f4:c7:2b:db:6c:62:df:57:aa:4a:
                    50:c8:35:cf:5a:f0:28:5b:59:d1:bc:7d:86:47:a2:
                    8e:5a:ce:48:98:a8:d4:c1:cd:2e:a2:d5:9d:be:4d:
                    e1:7d:90:0a:bb:55:9e:6d:4d:8d:a4:a3:bd:b8:2e:
                    b0:45:42:1d:52:77:31:be:01:fb:37:d9:14:c0:96:
                    d7:04:cc:d4:4c:d2:8f:28:39:cb:47:3d:0c:b1:f3:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:1A:D3:20:CE:9C:2C:79:68:6D:40:E4:96:19:71:5A:B5:F8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9ad8769a-95e0-353f-a7ac-fcd0c2c25285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:92:d0:fd:25:34:2f:61:88:65:17:5d:39:3a:c8:3c:d0:
         ae:bb:37:d6:3c:1a:91:4e:af:ea:05:c5:b2:3f:b1:09:aa:ff:
         e4:b2:60:32:dd:b7:b9:c7:e4:00:29:1a:d5:62:37:9a:8e:f1:
         39:b3:59:56:96:fc:b5:e3:58:fe:86:b2:1b:72:2e:1c:3e:51:
         34:e7:b1:06:91:e0:86:8f:e8:71:2e:dd:57:9e:af:e0:77:c9:
         b9:31:24:77:a6:d2:8b:dd:ee:22:94:fd:0c:cd:5a:fb:9f:4f:
         e0:cc:dc:77:df:fd:58:0c:65:0c:28:36:bc:aa:60:b9:20:d0:
         52:80:c4:ba:56:dd:6f:8f:09:da:f0:5c:df:c4:f9:0c:db:e7:
         ee:45:7b:ed:46:f5:95:6b:4a:5d:71:d6:94:b9:33:2e:1d:c5:
         d1:12:e8:ba:cb:ef:85:85:04:cd:a9:30:b0:11:d6:ae:b0:87:
         09:43:2b:57:6f:5c:70:f7:37:59:6e:73:56:e1:6d:86:10:2e:
         77:93:ea:32:b7:5b:db:52:3b:a2:26:fa:b6:49:e7:54:40:2e:
         53:8a:e5:a3:e5:60:95:e1:df:ff:23:41:f6:46:17:e1:06:b2:
         ed:8e:e7:bd:d1:6f:d4:f2:50:a0:e5:15:23:3d:3e:87:9a:c6:
         9d:f9:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:30 2025 by rpki-client