Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa
File:                     d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa (raw, json)
Hash identifier:          e6qYbB7vaDpN4mW3tQZNByTdSTpxSnHwFKw14o2YJAU=
Subject key identifier:   BA:99:3C:84:18:E0:A2:1F:F8:55:E3:3E:C6:E2:52:F8:DF:9C:13:68
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848265FF1811B136088D0973100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     3925
IP address blocks:        209.66.100.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f1:81:1b:13:60:88:d0:97:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=2b8f8287-1d51-464d-bf02-b86770ff674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:0e:c2:a3:ab:3c:b0:df:f4:fd:c8:92:6e:
                    88:3e:a5:56:7b:24:f0:b6:9d:c6:44:14:f7:11:66:
                    db:75:d3:2b:09:34:fb:78:83:01:bc:73:32:49:a3:
                    b4:fd:07:7f:39:c5:42:63:62:74:5c:47:9c:f6:37:
                    9f:c1:17:a9:41:c9:0b:21:67:04:b7:c9:dc:77:0f:
                    cd:df:9d:8a:b0:46:d0:e3:46:dc:51:76:ed:de:27:
                    f3:28:7e:7a:5e:74:e9:b0:ff:7a:20:7f:e6:c9:ba:
                    9b:a7:34:cd:11:42:52:31:ad:70:87:30:18:1c:34:
                    bb:c8:51:e9:cd:02:3e:08:f9:47:50:50:6a:7d:fb:
                    5f:7f:e7:88:82:e0:4b:13:f6:be:f8:20:cd:9f:df:
                    43:84:2d:d9:6e:9e:1a:72:2b:35:ef:1b:f2:48:c9:
                    cd:c7:6e:28:bb:be:31:30:34:82:24:fa:7e:4d:ff:
                    0e:7e:84:9f:9f:e3:69:04:d4:9e:4d:29:9c:cb:e5:
                    e5:79:18:a2:17:2d:00:64:d1:47:97:e7:0a:0c:ec:
                    d0:ce:e0:1a:52:2c:a8:11:25:6f:3e:89:90:da:58:
                    53:cf:99:5c:c2:2f:ad:06:7b:18:56:eb:ff:c9:fe:
                    2b:52:e0:5d:7d:d1:02:6b:62:ca:21:4b:c3:56:82:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:3C:84:18:E0:A2:1F:F8:55:E3:3E:C6:E2:52:F8:DF:9C:13:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:ab:47:52:5d:61:8b:8b:f6:1d:ea:43:f8:62:c3:f5:23:
         21:07:e4:1e:ae:14:2f:ee:ca:6f:bf:8c:7b:9f:72:3d:de:ce:
         8d:03:f3:ea:d6:fc:bc:ce:73:55:c8:9c:64:93:f7:89:f8:7f:
         3d:97:17:b2:05:42:4e:31:86:cc:ad:52:d8:b9:9f:d1:1e:8b:
         3f:53:d9:10:3b:e7:a5:b1:e4:d6:5b:87:99:e8:00:bf:7c:4f:
         a0:fe:67:df:c8:0a:24:bf:24:aa:2e:3e:2e:12:ee:dd:3a:39:
         46:5b:bf:8b:68:b9:bb:53:a7:2b:39:6b:8b:b5:8a:f9:17:83:
         e1:42:64:cb:0d:8d:6b:60:c7:f1:ca:fa:9f:a8:54:bb:5c:55:
         54:d7:a3:82:1e:be:30:37:45:a6:e7:15:1e:0e:39:ea:56:84:
         78:1d:5a:be:ef:4e:da:39:4c:cf:92:84:9a:6a:15:f6:01:ec:
         4c:15:12:23:1f:a9:a6:e4:cf:68:6e:15:f0:38:c6:4f:39:17:
         08:e0:d3:a1:d6:7d:ef:be:09:fc:27:61:81:03:51:c4:45:c4:
         04:52:a1:3b:df:d7:f7:16:ec:83:a8:3a:02:bc:04:44:51:15:
         c6:0c:2a:2c:33:fc:b8:fa:47:c4:40:44:f3:43:0f:4a:0c:03:
         8c:bb:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:37:38 2025 by rpki-client