Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f85bd9f9-2999-3438-b020-9a1903636d44.roa
File:                     f85bd9f9-2999-3438-b020-9a1903636d44.roa (raw, json)
Hash identifier:          4c/+8QtJ0otyIc7T5aEYYj4yZNJAtbw39/+FJ+MoHi8=
Subject key identifier:   FD:E9:3F:57:33:90:5B:20:AB:6E:80:5E:D2:60:8F:DB:77:07:94:F5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848186A861144FFEA2EB5E40B00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f85bd9f9-2999-3438-b020-9a1903636d44.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     26664
IP address blocks:        128.177.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:86:11:44:ff:ea:2e:b5:e4:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=5e34d637-55ac-4d90-9ffd-7be8928badda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0e:06:eb:1e:4e:dc:a3:a7:5f:5d:89:ea:57:
                    35:ba:bb:18:26:a6:ea:ae:bf:01:2e:5b:38:64:da:
                    f1:11:01:21:ed:6b:b3:ab:f9:6f:3c:eb:35:08:0d:
                    19:39:e2:5d:ac:0b:fc:b1:b6:4f:de:9f:07:7c:a6:
                    bc:2f:38:4e:25:c4:de:03:d5:23:71:2c:8f:b2:49:
                    35:64:72:3e:0c:73:39:9f:d0:9b:c3:ca:23:80:d8:
                    6a:3e:7d:d1:21:90:3b:13:8c:76:85:9e:be:60:f3:
                    9a:e7:ce:15:5b:9b:8c:01:5c:a5:28:02:56:bc:56:
                    4c:4f:5b:97:c3:ca:1e:1c:d4:4b:b0:f4:a1:ed:a3:
                    72:7d:74:f8:7b:6a:3d:01:fe:4d:4c:0c:44:7b:5b:
                    b9:73:b2:41:f6:76:05:30:b5:a8:bd:49:c4:13:70:
                    03:56:0d:d2:a3:b6:8d:95:ac:11:21:19:c6:5e:0c:
                    9c:62:a8:c8:20:70:33:0a:5b:00:d7:ce:2d:36:bb:
                    12:80:1e:d0:96:bd:fc:73:88:90:8a:cc:8b:3c:94:
                    01:5d:cc:05:0f:b1:b4:ab:ff:0d:64:4f:fa:be:92:
                    dc:a8:6f:41:83:41:f2:9d:db:82:58:80:d3:d6:41:
                    b0:5e:6b:17:8c:6f:6c:61:72:7b:28:b0:a0:01:34:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:3F:57:33:90:5B:20:AB:6E:80:5E:D2:60:8F:DB:77:07:94:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f85bd9f9-2999-3438-b020-9a1903636d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:b5:32:3b:f5:d0:4b:c6:98:6e:5c:cd:72:cd:6a:bf:bd:44:
         e6:95:8b:9a:80:eb:80:2a:be:88:fb:e1:77:43:eb:57:0b:ea:
         a9:b2:2c:9b:83:db:59:5a:cf:b2:21:c2:8c:30:79:a5:8f:2b:
         03:d7:8a:91:c6:71:af:3f:ab:bd:a1:51:f2:e1:0d:04:73:ab:
         93:10:5a:bc:dc:23:e1:e8:f3:ed:a7:7c:97:48:62:be:fc:84:
         db:d6:b5:a0:a8:d4:f0:e8:5b:1e:2f:16:a5:a8:c0:ae:02:4d:
         fc:45:4c:09:c6:6f:4c:04:af:d0:f8:ea:ec:ab:eb:e3:ed:dc:
         b7:88:de:af:6a:4a:e9:2d:86:d6:c1:de:c2:f7:de:d5:d7:10:
         67:00:a8:ce:52:e3:f5:30:f3:3f:c5:49:a0:58:fc:5a:16:56:
         f4:8c:b6:a0:4b:18:da:50:e2:c6:1f:59:76:f2:43:b5:0d:b0:
         4b:71:1b:d6:92:f5:d0:39:a0:18:bb:d8:94:9a:a1:bc:6d:88:
         00:b3:6f:9b:c9:a4:8c:66:e1:83:97:c4:89:a1:3d:95:a1:89:
         fa:f1:35:c8:5d:64:ba:00:53:6b:bb:a6:ba:1e:e5:d8:2e:3d:
         65:2f:c8:4f:fa:6e:ec:cd:c8:36:36:d6:5a:cb:79:5d:de:23:
         8c:10:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:41 2025 by rpki-client