Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa
File:                     0b1c3364-e87a-3b7d-af93-e0c89841b720.roa (raw, json)
Hash identifier:          Uy4L8jPEOo9rryp/cM8Uo9QK78kRgL3302CzQB1qL9s=
Subject key identifier:   5E:6B:4B:0A:CD:F7:F1:25:D8:9B:5B:18:80:2A:3F:61:40:F5:0F:2A
Certificate issuer:       /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial:       010D0C9F4328584824FA7BD94E180F57221F14C0
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     32762
IP address blocks:        198.96.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:7b:d9:4e:18:0f:57:22:1f:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=cc55951d-5800-45cd-b290-885df2007106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:d6:48:27:fe:c8:88:a5:99:60:d0:38:a7:
                    8d:af:37:0d:03:45:c7:40:83:df:a5:fa:ff:82:8b:
                    6f:45:ee:24:3c:56:27:fc:98:72:0b:65:7e:10:6a:
                    30:41:77:05:25:8e:97:44:1c:90:67:d4:fa:57:c7:
                    4d:99:88:46:48:c4:49:0a:12:b9:dc:22:ef:13:fb:
                    94:71:2d:b1:d2:9a:0a:7b:40:5e:be:b8:a7:98:45:
                    53:0c:13:e7:48:00:2f:5f:7c:60:35:d1:82:67:c4:
                    91:79:e5:5a:77:d0:f3:ee:8a:d7:c0:ff:4c:21:ed:
                    9e:f0:0a:33:ea:a8:e0:ee:ed:d2:a1:97:ff:0c:55:
                    4f:2d:63:7f:0e:4c:84:ee:1e:da:30:94:e0:2b:7e:
                    7e:a0:9f:54:95:d0:99:a2:c2:28:77:73:82:d5:17:
                    22:e4:cc:b8:0e:56:da:23:0f:b9:13:d8:65:dc:3d:
                    61:03:3d:3b:ff:2c:cd:09:e6:78:db:ce:f9:c7:22:
                    b6:fc:a3:8b:81:fc:cc:b1:0a:a1:fa:d1:3a:11:b1:
                    15:a0:c2:75:6b:a4:b6:0f:ce:e6:62:d5:24:be:b7:
                    92:ca:4c:31:22:a2:62:5a:08:65:24:fe:36:a7:12:
                    e2:53:1d:fb:b8:f6:1d:02:5a:fc:20:a6:49:ec:f8:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:4B:0A:CD:F7:F1:25:D8:9B:5B:18:80:2A:3F:61:40:F5:0F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl

            X509v3 Authority Key Identifier:
                keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:6c:85:ce:e2:12:bc:06:1a:7e:06:27:99:f8:c3:84:53:
         38:43:be:b5:8a:dd:5c:74:d9:7b:78:40:71:4f:30:b4:4e:73:
         cf:50:27:c0:44:18:a1:49:1f:74:7a:39:60:95:07:c6:c8:44:
         ed:c6:04:97:20:76:ee:ba:4c:aa:4d:9f:28:aa:06:f4:80:bf:
         94:36:79:d7:b2:0a:99:09:00:c0:65:f8:06:6e:68:59:97:f9:
         93:0b:a2:bb:ad:23:b4:cc:de:be:70:fc:ce:88:e5:05:33:ac:
         ac:73:41:c5:76:ac:9e:46:40:8f:9a:18:7b:dd:4e:61:19:33:
         fa:3b:ed:a2:7c:bb:08:d5:37:f9:04:1d:d2:e3:b6:93:41:a0:
         4a:dc:1c:be:3a:0c:ca:a4:97:98:03:77:51:31:e8:bb:01:cb:
         46:e0:f7:2c:4c:e1:81:f6:e0:8b:d6:04:46:79:42:03:2a:a2:
         c3:8f:c0:df:bf:04:d3:c7:dd:b3:8a:80:3f:75:c9:d3:eb:49:
         31:22:21:28:c5:af:85:74:c2:66:5d:ad:df:72:ce:ee:7e:5c:
         3b:b8:c2:16:5d:c5:ea:5d:b3:cc:20:14:0f:c0:11:2c:b3:b2:
         74:be:0f:f1:5c:ba:00:bb:83:87:72:57:85:f1:f0:2f:a8:98:
         46:b8:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:53:37 2025 by rpki-client