Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d69fdb16-e016-363e-a34b-92cf42ed7850.roa
File:                     d69fdb16-e016-363e-a34b-92cf42ed7850.roa (raw, json)
Hash identifier:          XZP0tLK7OkMeKtyfbjSqQI1hOUKWw5OcoY3BpN8RAl0=
Subject key identifier:   DF:10:09:D1:44:79:A9:6A:D6:29:B1:9F:68:68:88:17:09:AD:FE:E1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584839EAC6B2C46F908E325C8AE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d69fdb16-e016-363e-a34b-92cf42ed7850.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     19955
IP address blocks:        209.221.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c6:b2:c4:6f:90:8e:32:5c:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=281fa82c-d5d4-498d-8000-45fe94e31e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:91:79:1c:61:75:b4:98:8a:4e:ac:7f:65:
                    6e:4c:79:15:c0:da:f1:76:e8:f7:d0:ed:03:67:c2:
                    81:02:db:23:77:23:71:e4:69:a6:ee:3f:a4:2a:8c:
                    11:36:6b:bc:38:00:4b:25:ae:d4:09:b3:e9:69:9d:
                    ae:6a:1d:e8:84:f0:0d:06:b7:b2:56:1c:ed:ba:07:
                    ca:96:81:07:8c:79:88:0b:1b:3c:c6:40:8b:d1:c8:
                    fd:02:54:8b:89:71:ef:95:5c:12:3e:6c:bd:0b:13:
                    b6:78:be:2f:39:a5:70:c8:78:e3:74:12:c3:cf:ba:
                    c1:72:b2:9d:ca:ea:1d:2a:08:68:42:31:be:31:32:
                    e0:f9:b2:16:ae:e3:d5:9c:36:87:4e:3f:5a:ce:0d:
                    bf:cf:ed:bc:cd:26:6c:fe:06:92:5e:0e:92:98:41:
                    8c:0c:5d:46:48:c4:2d:be:89:e5:33:29:fb:74:16:
                    33:01:44:3c:3a:04:f9:02:a8:3c:d7:dc:93:1e:04:
                    3f:5d:71:c6:9f:85:cb:06:cf:ec:b1:99:b0:8b:71:
                    6f:b1:63:2a:09:a3:7c:af:e2:42:13:01:c1:72:fa:
                    50:9f:03:c3:7a:f6:82:35:45:d2:a1:7c:bf:0d:8a:
                    6c:a6:80:6b:90:25:db:c6:41:a4:85:8b:cc:5a:d3:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:10:09:D1:44:79:A9:6A:D6:29:B1:9F:68:68:88:17:09:AD:FE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d69fdb16-e016-363e-a34b-92cf42ed7850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:b7:b2:7a:4e:7e:27:68:0d:f6:09:c2:f9:75:4b:ce:7a:
         8b:98:d6:58:2d:77:b5:85:01:9e:4c:a8:02:8b:57:98:62:af:
         68:01:01:5c:86:d3:7b:55:02:8f:a8:8b:53:29:3f:83:e3:b0:
         17:33:fc:2d:2e:86:2a:52:8b:f1:71:7b:20:19:b1:88:cb:45:
         a8:55:b4:7c:61:24:98:7f:1b:fe:27:20:d6:0f:a4:d0:28:fa:
         bb:43:f8:38:57:65:09:7d:e2:b6:04:3d:82:6b:6f:0d:49:f8:
         bc:1b:38:3b:17:dd:df:ca:a8:b5:10:e8:e2:47:46:a4:f9:4b:
         ee:26:33:c6:93:e5:0a:7c:2c:ad:39:9a:98:9a:83:54:4a:51:
         7b:63:b1:df:26:cc:f6:25:6f:8f:09:ef:a7:95:fc:d1:a2:1f:
         52:63:bc:e0:30:7e:e3:fb:98:48:62:08:9c:bc:fb:41:a2:a0:
         1b:3c:90:64:18:96:c9:0a:38:5b:54:37:2e:a9:7e:3c:62:b4:
         36:01:4d:3a:b7:8c:44:3e:2a:3f:e0:ff:40:3f:1c:f2:15:07:
         e4:f2:ac:76:48:05:8e:c0:76:82:cf:31:50:95:49:1e:ee:ce:
         99:a8:6b:07:af:ae:78:0f:45:b9:84:f4:d2:05:cf:cd:b9:e1:
         9b:50:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:40:11 2025 by rpki-client