Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/db19650b-784d-3d88-aac7-169404dfda32.roa
File:                     db19650b-784d-3d88-aac7-169404dfda32.roa (raw, json)
Hash identifier:          Zk8OV6hw7TDAYsVcxZ28/98dOOBoUziAZGEPEYgQ9zY=
Subject key identifier:   A9:39:58:EA:E3:C0:29:52:AB:7B:AA:71:E0:6F:8B:E8:1C:D6:F7:9D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848186A84E8B590FC1A00459070
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/db19650b-784d-3d88-aac7-169404dfda32.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     21534
IP address blocks:        128.177.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:84:e8:b5:90:fc:1a:00:45:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=c1d32b62-1757-4d57-959f-8a95f6e96974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:cc:c6:39:3c:a0:03:a9:c8:8c:83:9e:13:
                    ca:92:6b:e0:ca:32:f6:c5:df:33:f9:2c:87:27:21:
                    30:24:a1:54:e9:4d:9f:c9:a5:69:e6:55:d9:c2:a1:
                    1f:f7:5d:7b:36:f5:54:db:37:f7:58:5a:0e:0d:20:
                    10:8d:29:00:b7:f7:5e:1e:26:c4:a2:e5:28:5f:c7:
                    16:ad:e8:05:00:5e:5e:b5:af:2f:7c:2a:31:af:a1:
                    56:8c:c0:e0:2e:f9:db:5e:e7:eb:f7:13:e8:8c:5e:
                    77:72:55:11:1e:ef:bf:02:68:53:11:63:60:6d:17:
                    61:a2:6e:08:40:73:49:3d:bb:77:e2:25:ec:48:ea:
                    72:c1:65:ca:92:d9:26:51:6e:a8:43:59:e7:f0:8e:
                    70:91:25:6f:3b:7a:6b:75:e2:71:75:bc:76:0f:9d:
                    8d:86:19:d0:0e:21:ba:fe:42:ed:47:8c:f0:6c:03:
                    5d:24:24:05:d7:3a:1f:c3:71:21:13:6b:c2:b7:dd:
                    78:10:b0:4e:ce:17:c8:a1:2a:e1:5d:89:6e:d1:75:
                    fb:70:fa:21:df:d0:bb:15:b1:a2:54:aa:08:01:8a:
                    d8:71:ae:f4:0e:4e:8c:db:59:4b:7e:4c:93:ab:f8:
                    99:b1:4f:92:2f:33:96:a9:84:86:df:7d:56:0b:c7:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:58:EA:E3:C0:29:52:AB:7B:AA:71:E0:6F:8B:E8:1C:D6:F7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/db19650b-784d-3d88-aac7-169404dfda32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:be:ae:b5:2c:4b:57:14:ac:d3:3c:08:e2:b7:bf:4b:96:
         cd:6d:91:1a:3c:16:d3:4f:ef:1c:d2:04:41:9f:4c:60:72:6f:
         70:29:5b:fa:1a:c8:5c:c3:1b:97:82:d6:b8:73:0e:d0:d2:09:
         d0:d0:68:99:36:70:fe:37:39:54:2c:f7:ec:18:49:55:b7:34:
         5f:dc:fa:d0:c4:7f:01:23:7d:e7:0c:bd:60:cf:b5:1f:bd:4c:
         e2:1a:e2:53:c4:02:fa:7d:c4:60:c7:93:47:35:18:1f:e4:e2:
         f1:3b:68:88:40:90:aa:6e:0b:21:c5:e5:c5:4a:69:18:4f:fb:
         16:df:ef:f3:92:78:a6:26:1f:8b:04:bb:54:25:15:60:04:52:
         4b:7f:8b:50:28:cd:ea:68:4a:ef:ca:0e:96:e2:75:c9:cb:2f:
         69:c5:17:05:c3:d4:7d:98:47:b3:cf:d1:0d:10:13:61:87:3d:
         de:53:a6:69:22:24:f7:6d:94:ff:6e:aa:70:82:d1:05:ba:e9:
         07:c1:e9:0a:c5:f7:a8:b6:f3:3e:f2:93:af:5e:16:33:92:b7:
         af:33:55:27:f2:71:bb:07:4a:03:0e:19:70:17:7d:bd:02:a6:
         4a:e5:11:8a:79:2e:47:83:da:36:9f:75:89:46:df:bf:70:2a:
         c2:73:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:34 2025 by rpki-client