Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
File:                     fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa (raw, json)
Hash identifier:          uB43vt1sCW5kfPOD198fRc+OloCFtEhLtlTNJL+j8Bw=
Subject key identifier:   14:4D:0F:A3:58:E5:11:42:51:E4:07:A0:FD:C5:9C:DF:28:8C:83:A3
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858483885435AD32130F4C12BB680
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     22953
IP address blocks:        132.219.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:43:5a:d3:21:30:f4:c1:2b:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=d703e33d-710f-4fda-8ba7-06c37a94b197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:c8:de:75:62:7f:26:d9:c7:50:c3:5f:95:
                    80:de:f5:c7:ea:ba:f7:88:f1:30:aa:6d:11:49:b8:
                    52:1e:32:31:a1:dc:30:28:fe:94:68:c6:31:74:0f:
                    18:69:55:a6:60:fd:3e:f0:79:b6:b9:cb:bc:83:cb:
                    eb:57:ae:a9:4e:8c:16:f3:5d:bd:f6:3b:1e:4f:fa:
                    0c:2f:09:d2:2b:af:a1:ed:5d:79:8d:45:98:45:c2:
                    35:89:dd:5e:36:8f:96:a5:02:30:09:30:41:e7:89:
                    f8:94:87:54:54:72:89:f0:d4:12:5c:c8:d6:56:f5:
                    58:d0:49:67:aa:00:35:25:ae:c9:a1:b3:c6:e6:27:
                    b1:92:fc:5c:d8:c0:9a:ea:db:1b:4c:93:0c:1d:de:
                    d4:34:de:d0:b2:f0:e7:48:31:e6:f8:6b:4a:5f:b4:
                    75:ce:1a:b6:14:2d:e4:f3:03:dc:20:7d:4f:b9:0a:
                    45:1a:58:3d:f9:a5:83:11:26:c9:68:72:31:83:1a:
                    8d:ff:3b:a8:10:14:d2:84:68:5d:2a:4d:e5:26:20:
                    39:f9:9f:1b:40:06:12:09:af:c5:15:7f:47:ae:04:
                    94:6b:08:bb:3d:56:37:7b:2d:4d:a2:14:cd:df:b6:
                    ea:f2:ed:9e:5f:56:07:d7:6e:e7:80:01:0c:fd:0b:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4D:0F:A3:58:E5:11:42:51:E4:07:A0:FD:C5:9C:DF:28:8C:83:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:46:fb:1b:6c:57:7f:81:4f:d7:ef:39:85:34:c7:e6:04:
         4c:cd:19:98:39:1c:8b:48:9c:4e:e8:f7:8a:31:df:4b:90:72:
         90:f7:7b:f7:f3:8a:63:3f:22:ca:64:6d:77:75:1b:fa:21:bb:
         76:3f:1b:d8:26:07:ae:bc:46:cd:45:2d:2e:0d:c3:b2:33:b4:
         96:0f:d7:43:be:d8:90:1e:3c:0b:8a:5c:a6:85:a9:74:04:8f:
         54:96:32:f0:82:5e:71:61:e0:a6:d4:65:69:57:48:97:89:73:
         f4:9f:fa:20:e2:2a:c7:f7:ec:fe:6e:6c:de:46:f6:39:c7:c4:
         1b:ec:5c:d0:3a:4d:44:5d:5d:b2:5b:cf:df:bd:cd:5e:bb:83:
         5e:1b:0a:93:37:ae:af:33:16:9d:eb:f0:07:50:96:66:ab:a0:
         29:ab:90:73:f5:ae:d3:32:6d:ea:c3:58:08:a1:8c:2a:77:0f:
         46:15:ec:82:9b:87:27:ad:95:3e:72:ba:21:cb:49:b3:7f:7d:
         29:99:ef:20:05:ea:28:71:e9:22:54:63:f6:99:3b:22:3b:01:
         35:1b:5d:bc:80:08:3d:d3:c4:ad:86:fd:75:66:be:ba:fe:92:
         bc:5f:89:b8:2d:e2:28:e4:a0:b9:12:a3:28:e3:63:1b:1a:82:
         d7:dc:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:49 2025 by rpki-client