Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
File:                     7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa (raw, json)
Hash identifier:          G1YRZh1TDSla7K190BQcC4xf9dLDEDldRm9awffjryY=
Subject key identifier:   D4:5B:32:82:4C:1B:97:C3:57:61:B9:59:49:E4:39:CD:7D:89:6F:8C
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F43285848573AD65E551E8FE393F38000
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     36511
IP address blocks:        137.83.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d6:5e:55:1e:8f:e3:93:f3:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=16fdd98e-c649-4b36-a477-331fca76a3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:fd:a5:97:d0:48:3c:be:9a:07:6d:b5:9a:
                    48:bb:06:27:d0:5e:ca:a7:fc:b1:1d:00:d9:bc:03:
                    29:c3:b6:df:9b:7d:46:86:00:4c:0a:14:c7:83:cf:
                    43:65:9e:86:17:6a:37:45:37:4a:03:90:bf:0e:d6:
                    28:5e:4c:cc:76:18:89:c1:81:77:c3:09:50:eb:9d:
                    30:86:cd:47:11:45:37:b1:2e:a4:f5:3d:b7:95:e8:
                    f0:7f:9b:b6:35:3e:c5:35:ef:5f:40:6c:d2:36:c1:
                    31:65:6f:cf:4d:83:ec:1c:1d:43:d1:d5:49:b2:c9:
                    c8:0b:df:65:d5:13:d1:08:d4:e1:ba:59:9f:ac:db:
                    85:20:ba:a9:61:0a:5c:c7:c1:3f:0a:f4:61:f4:e7:
                    61:b2:14:c2:a5:2f:95:69:95:99:53:ae:46:f1:ba:
                    65:a0:06:09:61:4b:22:24:fb:f5:5b:26:aa:ea:c1:
                    1f:45:a2:03:9d:82:1f:e1:d3:cb:7a:f3:24:4f:32:
                    d0:02:05:c4:0d:53:7b:94:69:c8:13:50:0e:50:1e:
                    6f:0e:41:cb:41:fd:15:3a:75:72:07:f7:82:3f:44:
                    bf:d8:72:a0:20:8d:dd:e7:67:6f:f6:0d:05:18:14:
                    38:e2:f0:49:5c:80:ab:02:b3:2d:87:12:86:f6:5c:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5B:32:82:4C:1B:97:C3:57:61:B9:59:49:E4:39:CD:7D:89:6F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:ea:a5:7c:60:8b:38:e9:ce:fe:8e:9e:cd:4e:0c:aa:08:
         68:60:6c:8a:74:86:5e:58:ff:4a:7e:b8:56:94:87:24:39:10:
         1a:81:f1:d3:11:f2:e6:28:9d:a3:60:79:03:87:26:22:91:9b:
         b3:a5:d2:33:e5:f7:b5:3d:97:14:c7:85:51:84:1a:82:22:89:
         ee:9b:36:60:44:8a:61:46:a6:b6:12:a6:43:ae:23:12:dd:e7:
         77:a7:20:89:6f:27:4b:80:6a:16:72:82:8c:27:9e:82:fb:fc:
         89:01:37:42:6d:44:be:64:34:9d:18:bb:12:65:28:15:db:f6:
         f5:b0:cf:d9:eb:38:4a:e7:41:02:d7:26:bf:3e:5b:0b:54:3c:
         cd:a7:2b:88:ac:6d:28:36:77:d2:e1:de:83:a7:c7:fe:4c:6e:
         eb:b4:34:b6:04:5d:26:fe:08:e3:ef:cc:df:fc:6b:66:15:84:
         f5:19:9b:06:fe:f1:c8:8f:13:9f:05:5e:36:70:92:77:8c:23:
         77:ca:c0:ce:07:35:ba:42:cb:29:7f:30:87:35:78:27:71:39:
         7c:58:e9:12:36:f4:0e:c6:2a:10:39:d4:68:97:9b:4b:f6:cd:
         fd:12:6c:4c:af:3d:37:2a:15:fb:79:c2:8b:37:22:ae:a7:51:
         77:34:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:55 2025 by rpki-client