Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa
File:                     c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa (raw, json)
Hash identifier:          wtg5vEVmMwuTozU23rFsgQU8N1H+WyRyv2w6Unm93/8=
Subject key identifier:   9A:F2:26:29:34:09:44:7A:A2:31:2E:3E:87:89:CC:63:67:7A:41:48
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F43285847E8F4C70FDB65CECBE6DA4EE0
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     31782
IP address blocks:        205.189.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:c7:0f:db:65:ce:cb:e6:da:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5828955c-244f-4c49-9de3-01ee9e29049e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:84:fd:f8:aa:fd:fc:fa:70:87:b3:39:e2:
                    d5:f5:a2:51:06:78:78:68:80:a7:17:67:d6:77:1d:
                    20:8b:10:a1:c4:b5:4a:da:0d:49:73:9a:f7:4e:b8:
                    80:ca:cd:8f:8c:d6:d3:61:9c:4c:12:8b:b1:0f:98:
                    c8:c2:f9:cb:f7:e9:83:b1:99:f9:a2:19:b1:cd:58:
                    af:04:7a:de:f7:f5:08:84:5a:cc:e9:33:dd:a0:c0:
                    bb:07:47:d7:df:3b:6a:01:52:5c:0a:3e:84:e0:74:
                    78:00:c7:3a:d0:28:c8:25:21:33:f2:18:7e:d6:ed:
                    59:d3:37:ad:98:a9:2d:62:cf:cb:09:52:bf:da:70:
                    62:03:1b:8a:f7:92:1e:c2:b4:94:af:26:80:12:cf:
                    d7:09:99:39:c1:3a:8e:94:87:54:d3:e2:61:c7:f5:
                    d8:5e:a0:9a:53:47:a8:24:79:71:4d:19:c4:c3:d1:
                    82:6b:ea:a0:c2:ad:6b:62:88:fa:2c:92:b4:77:e0:
                    b8:14:2c:b7:f0:09:a1:97:ee:61:ab:19:1e:66:5d:
                    50:13:cc:b1:21:58:f1:38:0a:69:d0:c0:8c:da:ac:
                    40:67:b2:10:5e:5b:d2:d6:97:1b:23:0a:f1:b7:2a:
                    a7:b6:ad:ab:9c:41:3f:3d:e3:0f:80:da:a0:9b:be:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:26:29:34:09:44:7A:A2:31:2E:3E:87:89:CC:63:67:7A:41:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.189.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:db:6e:a5:c9:aa:ce:7f:87:9f:19:49:1c:e6:82:e4:5a:42:
         48:42:02:3a:4f:02:35:7a:76:d4:91:61:ce:3f:03:e6:6a:5a:
         9f:8e:fb:94:bb:f1:48:0c:79:77:20:7b:33:82:1c:cf:5a:25:
         01:8b:9a:61:fa:f3:5e:97:3e:5a:f6:04:de:00:bc:80:98:24:
         6e:33:b7:d2:2c:e8:f2:1a:66:b5:a9:d8:25:25:68:dd:4d:25:
         39:a3:33:6f:b5:e1:ee:49:16:a4:15:c1:06:42:bd:57:49:ab:
         ea:fc:cf:46:83:64:68:82:88:b4:3f:11:8a:de:8c:07:5d:44:
         0e:8d:63:a2:d3:9f:09:e4:24:d0:d6:1b:f5:23:57:4f:fd:64:
         d8:43:b8:64:0e:3b:fa:c2:3a:e9:ca:3e:dd:e1:be:9f:c1:30:
         8b:11:0b:9a:bc:b7:f7:69:4e:38:20:02:6b:58:d5:1b:ab:d2:
         7c:83:7a:bf:19:ae:16:a5:86:51:4b:41:5e:3b:ed:a9:ea:02:
         0a:f1:c2:5c:d3:5a:7e:05:e7:49:c8:e6:79:e0:1e:51:f1:cf:
         d1:b6:6a:cf:b1:3c:02:d7:51:70:f7:26:90:9c:f4:27:a4:58:
         f4:45:df:48:40:63:cc:79:c5:d1:22:52:9a:fe:eb:ca:05:db:
         1e:ec:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:50:30 2025 by rpki-client