Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c848f55-0b0a-338b-8237-a405bf41308c.roa
File:                     1c848f55-0b0a-338b-8237-a405bf41308c.roa (raw, json)
Hash identifier:          3tfj6PNWr6J6ynKv1j4yMtbOE9pq+IEzD5Gq3N8XgzU=
Subject key identifier:   5D:A8:DA:EF:15:3D:5D:87:0A:48:2C:7F:C6:52:1A:D2:15:30:2B:78
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848186A84D39ADE5D6A1DD45300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c848f55-0b0a-338b-8237-a405bf41308c.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     32337
IP address blocks:        128.177.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:84:d3:9a:de:5d:6a:1d:d4:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=b4ad55ba-afe2-4b93-9a27-bfe5cf9445cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:0e:bb:1a:46:43:ae:c4:c8:40:1c:2f:6a:
                    9b:b5:c2:25:87:14:7f:d4:8c:a6:e7:a3:66:89:65:
                    32:28:28:5d:91:f3:2a:01:aa:71:16:85:ef:60:71:
                    eb:79:88:5a:dd:6b:55:ec:08:04:7c:31:4d:d6:a3:
                    17:e0:a3:b4:ed:ce:4b:40:14:58:22:1c:29:ef:f2:
                    de:83:44:65:ff:3a:36:a0:4b:d7:85:81:3f:5a:7d:
                    4e:23:b6:af:a5:14:42:c2:16:1d:73:20:4c:cf:42:
                    2d:ec:3a:d9:df:18:78:70:a6:bb:d8:74:92:e7:02:
                    4b:91:0c:57:5a:8f:73:4f:8b:24:a2:34:8b:1e:f3:
                    60:9b:d5:d8:2e:09:43:a7:74:d5:ea:5b:78:33:99:
                    4a:ec:41:41:67:8d:84:77:c8:a0:13:3f:09:94:57:
                    96:1b:15:3b:53:6e:ee:ec:90:1b:51:16:33:d2:96:
                    fe:ea:c3:f3:a1:3c:8d:45:ea:f0:9b:1a:36:37:67:
                    02:56:3c:d9:a8:3f:a2:d5:0b:8a:34:17:a6:29:16:
                    a5:02:03:2b:97:47:06:2e:cb:68:c8:12:db:a7:04:
                    6e:cb:00:bb:ee:f4:3b:b8:5a:f6:24:66:46:36:95:
                    f7:94:b2:d9:1f:1f:2b:c1:0c:6a:99:79:bb:14:ea:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:DA:EF:15:3D:5D:87:0A:48:2C:7F:C6:52:1A:D2:15:30:2B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c848f55-0b0a-338b-8237-a405bf41308c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:ca:89:dc:60:12:df:40:57:7d:d4:a3:ac:de:f1:ce:d0:
         bb:e8:06:09:92:3c:80:28:c9:ba:b8:84:12:9b:45:4b:db:1b:
         61:da:a1:87:88:9a:6b:3a:99:c7:54:0c:10:da:17:74:8e:c6:
         4d:a7:bd:d7:d3:4f:85:c0:d1:82:61:2e:8c:48:d0:95:73:10:
         dd:e4:93:8a:52:63:f2:1b:4f:f3:b6:ea:43:7e:34:98:7d:b4:
         89:57:34:ab:17:39:05:3f:fb:21:a5:6d:39:3a:5f:fd:37:e3:
         be:d2:d1:50:71:e7:c2:cf:65:5e:dd:c1:0d:6b:7c:5b:67:cf:
         62:22:2f:da:34:c4:b8:54:69:8e:69:05:52:fb:fc:f5:97:da:
         e3:79:69:1f:c8:fd:8c:16:b0:1b:61:17:6b:96:c8:f7:51:28:
         2c:a3:31:5c:36:7f:ac:61:91:42:e3:f8:e2:a8:f9:e0:c1:2b:
         16:ce:9c:96:19:23:e9:60:5e:2a:7d:9a:6b:84:24:5a:39:b6:
         eb:6e:5b:4c:9a:ad:30:71:c9:49:81:10:84:49:0e:3e:5f:11:
         6c:a9:bc:27:29:ba:17:79:84:58:85:65:67:0c:6c:df:86:e1:
         9c:1c:6f:66:b3:4a:5c:53:f2:52:38:5f:d5:77:98:34:eb:29:
         00:9f:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:49 2025 by rpki-client