Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
File:                     03efb475-2734-343c-823b-4efaee05cc2c.roa (raw, json)
Hash identifier:          8Z2VjQv2jDTLmWI6QjIxHJ7tLmQnFZMT6mmGd0nvxvg=
Subject key identifier:   77:54:3F:41:6E:95:1D:0B:7A:4F:86:2C:99:76:4B:8E:46:83:92:EC
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F4328584832F0322EB52CAC1CB1788530
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     11978
IP address blocks:        199.255.252.0/24 maxlen: 24
                          199.255.254.0/24 maxlen: 24
                          199.255.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:32:2e:b5:2c:ac:1c:b1:78:85:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a62fcf8d-5d57-4317-8a54-370b4fddcf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:9b:d8:1c:2b:12:ce:cc:45:40:18:27:10:
                    82:f4:22:a0:51:b3:07:c9:75:86:13:c6:e2:92:c6:
                    9f:1c:c3:8f:36:74:b2:53:85:cb:14:87:8d:61:84:
                    85:bc:99:0c:8c:9e:f6:19:3b:09:2b:8d:02:c5:23:
                    d4:a2:de:39:80:af:fd:10:ec:a1:2e:47:e7:02:8f:
                    62:5d:aa:57:a1:59:9c:e8:14:b6:1f:25:ab:45:6d:
                    aa:09:9b:2b:33:29:79:e7:64:b2:e5:8f:a4:68:65:
                    9d:6d:c7:14:12:c5:32:d5:ff:12:3b:5c:39:e2:7b:
                    37:89:00:f2:2c:65:61:8a:be:f9:06:24:55:5e:a4:
                    8f:a5:19:a1:35:27:50:a7:b7:50:8a:c9:ae:a0:68:
                    36:ef:a5:16:9d:98:cf:70:da:53:8e:5e:fa:03:4f:
                    a0:47:1e:26:20:9e:79:35:f2:e9:a1:32:33:09:1b:
                    d2:4e:db:26:af:e6:ad:e5:18:e8:a4:a2:70:16:d6:
                    b9:47:84:ac:3b:16:10:67:fa:b5:9f:6d:2c:7d:c8:
                    8b:1b:9d:8c:cf:d5:1c:64:34:bb:cc:56:65:19:e6:
                    52:6a:e4:f7:b5:ad:1f:e4:03:c3:30:88:cc:26:29:
                    59:a0:e4:5a:1e:64:4e:d5:53:1b:8f:3c:77:1c:e1:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:54:3F:41:6E:95:1D:0B:7A:4F:86:2C:99:76:4B:8E:46:83:92:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.252.0/24
                  199.255.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:2f:24:24:e7:a5:80:ad:07:25:cc:66:ba:3a:d7:6f:d9:
         5d:24:d8:71:22:cf:60:a1:86:37:fe:a3:07:d4:4d:f8:ec:75:
         4e:1f:6f:ba:1d:f0:1b:57:b4:b7:33:1c:ec:1e:a6:c5:7e:83:
         4e:3d:a2:ce:be:b8:b1:89:a1:be:4b:07:f8:92:c3:17:b7:d1:
         bf:49:12:1c:25:ef:65:b6:6a:6f:38:02:a2:76:55:4c:4e:56:
         99:5d:3f:c8:ba:b5:63:26:ff:a2:dd:63:08:8f:c8:bb:2b:47:
         47:35:6a:ed:21:77:21:a1:8b:c3:22:d3:31:3e:6b:40:74:95:
         eb:0a:a9:a9:e7:15:4c:99:8f:cc:6e:59:d8:73:26:76:37:27:
         34:7a:c8:c5:80:19:8d:d4:28:bd:f4:96:87:ef:22:6f:6c:f2:
         af:c8:fb:29:60:72:4d:f2:3b:32:75:84:51:8b:19:ef:90:8c:
         8a:b2:5b:4a:dd:54:d0:1e:7e:bd:a2:a0:48:45:c4:fe:88:7a:
         9e:0d:6f:3d:ef:bf:32:5b:d8:ea:17:b3:8b:20:3c:39:b6:6c:
         85:d6:e5:f8:11:90:4b:e7:a1:79:79:04:95:18:79:b7:0b:98:
         7c:57:6f:0f:d5:b6:b7:38:d2:28:a0:b1:88:94:8f:8c:ad:67:
         92:67:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:20 2025 by rpki-client