Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/59717bb6-092f-3d83-ab7c-ddaa4e4503bf.roa
File:                     59717bb6-092f-3d83-ab7c-ddaa4e4503bf.roa (raw, json)
Hash identifier:          v/IAbONxgPDDAAb9AM4uXqG4fHogskIE0venn+r43J4=
Subject key identifier:   F1:C6:F4:C1:8C:BE:D2:05:A8:98:8E:13:EB:3C:01:07:BF:8B:8D:62
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584865303E1CBB3400D83FB41E00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/59717bb6-092f-3d83-ab7c-ddaa4e4503bf.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        192.161.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:3e:1c:bb:34:00:d8:3f:b4:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=a222cd8c-8d40-472f-9762-c98a086c72f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:4e:ce:f6:b2:e4:1d:f9:3f:ab:fc:a5:b1:
                    b4:0c:6d:f7:5e:bc:c6:12:ee:b9:6c:e3:10:c8:89:
                    8b:d8:cb:a6:a7:05:a9:98:ce:68:9f:fd:65:96:ce:
                    d6:1f:4e:20:6c:b4:b0:78:e3:15:34:3b:7c:aa:8d:
                    69:73:fe:e5:42:5a:89:80:68:c5:76:af:d1:96:7e:
                    7c:19:04:6a:7f:7e:0a:2a:95:ed:06:af:e8:2c:3f:
                    1d:c6:22:42:ac:dc:dd:f3:c7:12:ef:c5:f6:2e:aa:
                    aa:01:f6:43:cd:35:92:0d:66:ab:f7:96:65:cd:05:
                    5a:c1:2b:c0:04:c9:47:b4:4a:b5:2a:8d:a0:18:07:
                    c3:14:07:b2:cb:b4:b5:db:6f:31:00:08:46:17:2e:
                    a7:69:40:0e:11:25:47:80:30:22:b2:2b:97:57:6c:
                    b0:bc:5a:6c:bb:69:54:e4:aa:c8:d8:93:ee:0e:97:
                    9f:39:d8:ce:31:45:a9:df:fb:98:62:7e:e5:0e:4c:
                    33:74:13:92:34:85:d5:3b:e4:17:3c:04:41:3f:ff:
                    f2:d7:52:c5:51:e0:86:89:90:68:d7:31:70:cc:28:
                    17:3c:93:d4:a0:65:1b:35:a4:3f:6a:97:c1:82:52:
                    ab:87:ef:3e:fd:d2:d8:f6:8f:91:a2:6e:7a:c5:be:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:F4:C1:8C:BE:D2:05:A8:98:8E:13:EB:3C:01:07:BF:8B:8D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/59717bb6-092f-3d83-ab7c-ddaa4e4503bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:32:9b:ce:f8:b4:d3:c1:5c:76:b0:03:8d:f3:48:bc:58:
         6e:1f:73:ba:cb:ce:ee:85:41:0c:f9:a4:46:3b:e0:90:12:73:
         64:90:74:9b:b1:68:e8:bf:5e:2d:68:7c:6f:35:1a:c4:d6:95:
         31:1d:03:da:da:ca:79:45:97:77:0b:55:e6:c3:57:1f:b5:02:
         ba:31:7f:d4:49:b8:31:82:7e:08:c0:96:2e:e2:d6:35:7a:ed:
         38:99:6f:e5:71:a6:70:f2:33:7d:23:26:97:f4:53:bc:3f:3b:
         3b:6a:62:50:0a:9a:fc:34:57:37:7f:6d:06:e8:b8:c9:43:7c:
         d3:9b:db:38:90:7f:60:54:c6:f6:ce:b4:2c:87:f2:cd:67:74:
         09:bf:e7:0d:7c:c6:74:00:fe:45:57:4f:98:2f:84:ad:72:a4:
         71:37:a7:0c:8b:b6:bb:f6:1c:73:8a:b6:65:0a:5f:77:7b:8b:
         fc:d0:f5:ae:6f:20:a0:82:11:4d:6c:35:15:d8:5e:d6:93:8f:
         78:34:07:cc:97:81:82:fd:2d:a5:14:cb:12:71:1a:db:2a:ca:
         26:47:e0:a0:47:f2:9a:2b:17:e4:85:19:36:d9:9e:dc:e4:9e:
         da:32:b2:f1:56:52:a7:dc:cb:31:fc:5a:a5:c2:4b:aa:2c:f4:
         2d:a9:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:39 2025 by rpki-client