Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa
File:                     f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa (raw, json)
Hash identifier:          cBfnyzYizINqSpqo28C0sgzaEVaP5zZn+67N2PRIrc0=
Subject key identifier:   24:09:74:ED:68:A3:AA:2A:72:EF:79:3A:02:7F:7E:55:91:C4:DE:26
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848186A8BAEE5C3AE3F498A40A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     27425
IP address blocks:        198.241.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:8b:ae:e5:c3:ae:3f:49:8a:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=04e9a6b6-b057-450f-8876-5b7ad00bfd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:1e:36:4f:8b:98:4c:43:ea:e0:c6:04:59:
                    1f:ea:2a:ee:e7:d7:0f:af:2e:70:0e:fb:e5:98:d3:
                    8b:eb:d1:d6:00:0f:d1:74:ae:1d:a1:b9:d6:ce:fc:
                    1c:08:ee:cb:d7:73:62:2f:a6:f3:c7:e2:4e:f1:4b:
                    0d:a9:13:eb:51:9e:89:1d:88:7f:d6:ae:81:08:0a:
                    2b:80:09:01:55:72:64:24:59:bc:0f:f5:ce:ef:4d:
                    8c:2b:83:c6:d2:5d:2a:5e:e2:73:e3:d6:a3:29:49:
                    f9:c8:e4:34:0f:7d:56:81:bc:02:0f:f7:bc:87:f8:
                    b6:94:03:f1:7b:a4:c7:b5:78:8e:bf:c9:d0:d8:ba:
                    af:59:93:83:37:05:19:57:d5:58:3b:88:f8:74:6e:
                    4e:7a:36:d0:d5:1e:20:67:7c:1c:5d:47:2d:06:1c:
                    00:d9:a5:77:17:72:97:83:04:51:4f:ac:9e:27:5a:
                    be:98:65:18:84:aa:ca:de:f3:c9:aa:34:9d:75:87:
                    5e:8c:ae:2a:aa:ee:1b:5c:c4:98:f5:ee:36:c4:79:
                    64:10:55:79:4b:46:76:5f:7c:5a:27:43:bf:9f:ca:
                    b5:77:6d:58:23:f6:a1:39:91:78:51:38:f5:1c:22:
                    e4:33:c5:34:6d:ab:71:22:37:52:94:46:e8:68:cd:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:74:ED:68:A3:AA:2A:72:EF:79:3A:02:7F:7E:55:91:C4:DE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:b9:8d:10:00:18:96:ad:cd:b3:92:5e:62:5f:eb:58:cd:
         5b:62:d5:5e:7c:fd:8f:4c:72:08:6d:73:12:e9:04:0a:14:2e:
         dc:23:2b:4a:1e:c2:93:4c:36:33:17:52:aa:df:81:c9:a5:2b:
         e9:a2:06:b0:ee:92:41:20:5e:be:d4:46:dc:f6:58:d6:ad:c3:
         59:8f:61:36:84:d5:2e:ff:cb:a9:4e:63:eb:2e:33:78:b7:b4:
         b8:18:60:92:ea:3f:30:c9:47:34:6d:73:c2:7c:d8:03:ad:0d:
         da:10:d1:e4:06:bd:8b:ce:85:77:ae:db:39:4f:66:70:36:1e:
         c2:51:87:2c:c5:28:07:3f:e2:9d:b2:0c:cc:7a:16:4d:e8:56:
         ac:dd:d3:89:83:68:80:a0:5a:2d:ae:6e:1a:11:c5:24:44:9a:
         9a:a8:f3:aa:4c:2c:61:25:d5:2c:6f:fb:c7:6f:fd:85:26:b4:
         ff:d6:62:85:f3:f1:de:80:89:ea:91:85:2f:19:59:12:64:05:
         ee:2c:b3:6e:4a:65:e6:59:b4:38:b5:d2:ec:d2:d9:03:80:12:
         76:29:11:7b:cb:c8:c3:8b:12:8a:af:dd:a8:bd:4f:16:30:68:
         97:5d:ed:60:ae:3f:d9:ba:f9:d1:a7:78:b4:cc:3f:a6:b5:e8:
         90:2e:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:23 2025 by rpki-client