Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa
File:                     e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa (raw, json)
Hash identifier:          4d+rzdKghCWOqatarpI+YaFwIC+jqOVv+V8bvpNO2fw=
Subject key identifier:   1B:56:29:E5:F2:59:C8:D3:3D:23:A1:4D:24:06:28:C3:11:A1:EC:2F
Certificate issuer:       /CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
Certificate serial:       010D0C9F4328584802150E9654C9B120A708F540
Authority key identifier: 36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     16519
IP address blocks:        132.194.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:0e:96:54:c9:b1:20:a7:08:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=eb03cc14-89f6-46cb-b9e5-07357d73b528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:38:c1:7f:83:cc:f9:aa:e2:83:39:3c:ee:
                    23:60:d1:e6:02:10:d0:e8:b9:1f:f2:59:1d:2a:23:
                    91:21:71:7b:e0:d0:cf:09:2a:af:63:9e:7c:90:91:
                    06:6d:03:e0:0a:74:bd:d8:23:cf:46:38:57:51:9b:
                    ba:84:46:cf:ae:3f:43:ab:57:21:b9:4a:2e:12:b1:
                    63:26:af:11:47:d9:5d:73:e9:4f:1b:15:b5:0d:40:
                    f4:65:d9:0e:94:77:c4:74:7e:20:1e:88:80:f2:f4:
                    dd:93:8e:b9:9e:c7:fc:01:19:5a:03:2c:f4:c6:f2:
                    f2:4c:bc:95:8f:ce:2c:33:f9:61:22:da:0f:06:d6:
                    12:c7:2d:78:29:b7:b7:54:fa:90:db:ab:28:e0:29:
                    32:06:b6:c4:95:b2:f4:35:77:f0:66:52:8d:35:46:
                    b2:97:f4:96:ac:39:ba:e1:f4:68:bd:e4:13:3c:81:
                    87:fc:cf:fc:d3:2b:57:6d:25:3c:f2:6b:1e:d9:a2:
                    3d:09:2a:52:be:e6:4e:1b:0e:68:f6:95:22:c4:42:
                    6d:67:c9:3d:8c:00:be:d9:e4:e6:79:bd:30:02:a8:
                    41:0c:4c:6c:13:26:a4:e7:8a:54:c9:69:19:ca:86:
                    71:98:e7:a1:36:74:25:ef:3e:c1:b6:06:0c:73:d0:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:29:E5:F2:59:C8:D3:3D:23:A1:4D:24:06:28:C3:11:A1:EC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.crl

            X509v3 Authority Key Identifier:
                keyid:36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:1f:ab:7f:14:2e:1a:7c:a8:13:db:84:c9:02:bf:0a:1e:
         12:0d:f8:d3:59:b2:50:c2:4f:4f:ec:67:ef:72:78:65:12:34:
         78:75:53:58:2c:bb:6a:a1:ca:93:4c:db:c0:64:d9:81:bc:18:
         04:88:50:47:a9:24:b6:49:b2:bd:76:35:12:44:35:d8:0b:c7:
         0d:73:72:2b:7d:75:90:3b:b6:52:4a:31:db:2b:5c:63:9b:d3:
         08:6c:29:04:15:5f:42:18:63:4d:59:cc:d7:b8:42:f6:21:9b:
         a7:32:57:62:af:cc:28:34:4a:43:db:e5:a0:55:df:28:6b:45:
         9e:2f:54:4b:13:90:60:06:1e:2e:d7:20:34:17:a7:b8:a5:e3:
         23:7a:32:aa:77:13:c9:cf:36:a3:99:49:5a:10:a4:eb:4e:55:
         8d:0d:82:4e:87:16:aa:f1:4a:20:86:1a:3d:82:40:a9:c1:57:
         1a:55:00:7e:91:ae:e3:d2:36:80:b1:e1:7d:40:2c:e9:ac:41:
         d0:11:bc:44:d2:1a:a2:3e:52:8b:cc:0c:fc:55:e3:81:30:7c:
         d0:15:29:26:42:f1:5e:f0:38:ac:a3:d6:62:81:d3:d6:db:a4:
         f6:63:bf:f0:07:8a:47:af:47:5f:b8:95:d9:aa:13:41:b6:39:
         23:51:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:18 2025 by rpki-client