Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
File:                     f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa (raw, json)
Hash identifier:          XbtmMd+Spj8PlB5xVwxSML5Pb6W4N9K3fxyj20bzFPo=
Subject key identifier:   D4:63:3D:DB:5A:7C:3D:77:8F:FE:6A:11:9B:65:59:7B:C6:C9:3A:69
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848265FFB617764AB2319A2A000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     29833
IP address blocks:        209.249.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:fb:61:77:64:ab:23:19:a2:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=e9f5b6b3-d3fa-4739-b83a-be039e8c0c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:7f:b8:b6:dd:cf:ee:34:d1:56:b0:01:14:
                    76:ca:b6:a4:31:3f:b9:c9:6f:df:54:e3:cd:83:43:
                    34:99:7a:d9:c8:b4:59:7c:ed:b8:2d:e5:ba:af:22:
                    59:5e:b8:78:c1:b8:44:8f:38:b8:8d:76:d8:13:bd:
                    69:c4:7a:86:d6:70:cd:30:a9:33:12:7e:b2:8f:cd:
                    7f:d4:66:c6:41:40:76:a3:e4:d9:47:ec:4b:e6:67:
                    5c:bc:c0:b5:d0:fd:84:d6:a9:95:45:3e:6e:ac:55:
                    47:cd:dd:c9:4d:75:c3:b6:5a:9a:e7:62:fd:df:6a:
                    83:80:95:b8:4a:06:a2:a7:79:e0:81:91:1b:92:80:
                    99:aa:9e:b3:54:e9:9a:88:8a:9e:25:ca:ad:44:bb:
                    1b:db:dc:fa:58:f3:6f:a1:ae:67:cc:a4:da:fb:81:
                    22:9b:42:6d:39:94:b7:e4:51:f6:b4:0c:d4:76:02:
                    32:6d:ec:18:dd:87:53:19:09:06:db:ac:db:f8:0c:
                    ea:f1:fc:cd:f7:59:1c:ee:78:bd:7f:df:ca:77:21:
                    62:1c:01:b7:2d:c7:b8:a7:d0:bc:a1:5c:e6:34:23:
                    94:f0:8c:a7:9d:61:50:85:bd:ba:1a:da:a1:31:86:
                    92:ee:6c:2d:50:7f:5f:c5:cc:2f:44:56:08:63:5f:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:3D:DB:5A:7C:3D:77:8F:FE:6A:11:9B:65:59:7B:C6:C9:3A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:65:3e:8e:e5:be:2f:50:b2:6f:7d:75:22:c6:3b:14:92:77:
         77:a3:3b:cf:f3:f8:43:6b:88:c3:b5:60:23:b5:af:9e:7f:59:
         cf:45:1f:c3:5d:f2:82:88:91:1c:4f:39:d6:34:6a:fd:47:63:
         aa:59:45:6d:67:3d:33:0b:96:c3:0a:8e:be:29:6f:c3:9f:44:
         be:19:76:b7:a5:dc:74:4c:8f:dc:22:54:c8:0b:84:9f:e9:2a:
         ac:fe:ed:ed:7b:26:b5:fa:c8:9d:f6:92:0b:c7:b9:bd:b7:d0:
         17:6e:9a:44:38:70:a8:c7:50:29:cc:05:92:4b:43:ed:d7:a0:
         b3:d4:a4:e2:8e:24:c2:0b:36:89:8b:aa:15:8a:00:4c:6a:ae:
         5f:19:eb:8f:ab:b3:08:d1:1a:58:8b:71:42:75:e0:8b:54:71:
         17:f6:10:09:0e:c0:03:44:77:d9:3d:47:ab:0b:ef:f1:df:af:
         10:14:e8:4a:fe:7f:de:2c:e8:15:03:92:85:96:1b:43:36:ec:
         a4:7d:2d:f9:c4:b8:08:66:84:16:cc:69:d1:f2:2a:26:2a:41:
         b5:d8:fa:9e:05:f5:eb:9a:04:31:0e:0c:42:cf:fd:38:31:2b:
         e1:64:ec:29:4f:a7:7d:1c:ca:66:e7:82:64:eb:a6:3f:cd:6a:
         7e:31:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:32 2025 by rpki-client