Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa
File:                     d489ae39-5520-30da-9134-1add845ade35.roa (raw, json)
Hash identifier:          67kzSf0jiY9dc/mjLW6nfdlyj/PmWvfpRJPL6YntGUE=
Subject key identifier:   8C:D6:E8:AF:83:F6:FB:15:B0:12:FE:44:7B:AE:44:0C:F3:90:66:C9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848186A90C3F907254C9CCE5580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     20940
IP address blocks:        208.185.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:90:c3:f9:07:25:4c:9c:ce:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=3bf65546-dcb7-4c19-939a-db68ccffe03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:3b:f6:c5:ea:51:45:ac:9e:8f:7f:3c:62:
                    85:d9:30:29:da:c8:37:d1:18:79:4c:30:e8:57:af:
                    4e:33:60:b0:e1:98:55:5f:bd:e6:78:2d:ca:91:0e:
                    32:b7:a7:25:73:75:a4:82:8e:50:94:1c:94:5a:69:
                    08:39:6e:7e:b4:81:fa:83:c5:9a:16:b5:75:fa:7d:
                    3b:88:89:ec:35:be:70:7a:27:9a:c8:b5:3e:d9:6c:
                    1c:cd:6f:b5:bc:ec:08:4a:3b:43:af:e7:e7:c7:7b:
                    a3:34:bf:eb:64:c2:b2:30:aa:f6:8a:4a:59:92:6e:
                    99:28:35:af:36:f7:4f:50:c2:3f:47:1c:e5:bc:4d:
                    13:3d:8d:7c:4d:89:ca:01:14:d7:9d:a6:6c:30:e8:
                    6d:1e:39:7a:e6:8d:0b:28:13:f5:39:f2:cf:a2:54:
                    79:1a:c9:7a:81:a7:50:9b:d0:b9:cb:18:51:fe:81:
                    b7:14:f6:50:6f:6a:b2:c0:b2:c4:97:45:67:a5:64:
                    94:b7:68:23:fb:5e:c5:2f:bf:c4:78:f6:38:9d:c7:
                    b7:9d:4f:2d:ab:30:2f:63:6a:dc:98:97:d9:28:33:
                    14:08:4f:ea:9e:e4:5c:ee:8f:5a:05:37:aa:b0:b6:
                    cf:c6:ea:4f:7e:f8:e4:ea:be:2b:e1:82:18:e0:08:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:E8:AF:83:F6:FB:15:B0:12:FE:44:7B:AE:44:0C:F3:90:66:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:ee:a2:9c:d3:f2:53:3f:0d:25:57:c0:07:a5:ce:19:3b:
         b8:7a:b8:ac:87:3c:c1:87:49:c9:6c:2c:68:ea:d3:4f:36:b2:
         d6:d0:53:fa:4c:5d:ae:99:cd:4d:fa:ce:62:4d:32:12:00:00:
         21:25:42:f4:df:69:c5:b6:d4:82:2c:bf:d3:91:1f:06:74:5e:
         e5:bc:5b:55:e4:d5:b1:ec:55:a7:e7:d2:3c:8a:31:51:b3:9b:
         02:60:e2:a6:b0:86:67:60:6d:3d:78:d4:5f:81:b4:2d:48:4a:
         3b:7d:64:c7:0c:4f:e3:99:90:7e:24:cd:af:7b:a0:bf:03:77:
         d6:18:65:66:f3:0f:e5:4a:38:74:31:1f:b1:66:9e:87:42:f6:
         bb:71:4a:44:17:26:40:1e:00:a7:01:e2:18:38:c1:7f:d9:3d:
         cb:cb:8a:f6:38:37:31:fe:9d:53:de:ed:b4:0a:8b:af:9b:50:
         91:cd:ae:63:cb:4f:1a:54:e0:f4:8c:64:a3:10:ff:a1:4c:38:
         95:5f:77:94:ba:77:ff:29:2c:49:a7:4c:9f:3d:41:9d:0f:3e:
         21:62:93:8c:3b:c0:3c:e9:31:0e:26:a0:92:b9:d6:45:f1:80:
         06:d6:b4:5d:f2:9b:b2:29:c9:66:bc:f8:7c:05:65:fd:a6:10:
         35:e1:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:06:31 2025 by rpki-client