Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
File:                     6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa (raw, json)
Hash identifier:          DfHA8R5uugZi6rf4v3UNp05OMm9X9oOWq0cp5AmDzSU=
Subject key identifier:   AD:C0:BC:F3:34:83:88:4B:EF:E4:76:3F:7C:7C:ED:0E:BB:B4:10:61
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F43285847F584F057D44AC4FE0C419A80
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     140543
IP address blocks:        170.205.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f0:57:d4:4a:c4:fe:0c:41:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=c88afee8-2b30-4f84-98ec-7986f62f564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:9f:83:a5:19:c8:0d:62:19:1d:ac:77:05:
                    81:17:b2:45:12:db:23:0c:f4:25:1b:e5:7c:89:4f:
                    b5:97:4b:25:b2:4a:8b:86:c0:f0:e8:96:64:1b:0c:
                    6e:45:ce:11:21:38:44:16:5b:60:d8:21:31:00:0c:
                    61:e0:bc:2c:15:d1:6f:e5:49:28:4c:02:ea:19:af:
                    61:5c:a1:c0:fa:79:6d:79:3e:ed:72:55:ce:3e:ae:
                    37:f4:db:fb:db:73:cc:6a:d3:c9:fd:2d:68:c6:29:
                    0e:98:2a:df:d1:39:b8:b9:e5:24:fd:48:2a:11:dc:
                    b1:59:1d:76:9a:ce:98:b5:05:cd:bb:f9:b8:50:79:
                    63:32:6c:cf:1f:89:f9:db:1b:72:5d:85:c2:3c:d8:
                    3d:08:87:ad:b9:21:dc:22:2d:bf:a5:94:87:7d:f1:
                    0e:bb:0c:0a:f9:f3:7b:a2:e1:e3:16:c0:c3:83:85:
                    f9:2b:80:32:09:52:6c:82:59:56:28:1f:08:24:d5:
                    36:ee:97:50:b0:4c:7a:e2:ab:25:ff:83:95:97:05:
                    4c:f9:a2:b7:7d:46:d7:8d:41:98:a8:a8:da:3e:08:
                    1b:dc:34:d8:af:82:0d:66:29:37:38:4f:be:3b:0c:
                    de:80:5e:67:be:22:cc:fc:51:82:90:f3:a1:5e:9e:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:BC:F3:34:83:88:4B:EF:E4:76:3F:7C:7C:ED:0E:BB:B4:10:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:c5:07:c7:6e:fb:e9:b9:45:9c:44:9b:c8:dd:77:92:b3:
         07:9f:ee:0d:c7:22:cc:70:1f:16:7b:d4:53:37:a7:e2:48:85:
         de:fa:06:80:23:d4:70:93:9b:93:a1:5d:37:df:f6:06:a4:86:
         d4:74:04:95:e9:70:d8:55:35:11:f4:45:e0:e9:15:21:7c:52:
         16:de:ff:4e:e3:31:49:7d:cd:8c:86:23:a5:91:3a:1e:b7:00:
         c9:b2:97:9e:01:fb:6e:b9:a5:6a:b7:98:3d:7c:cf:73:f8:c9:
         11:8d:44:ce:38:a6:17:38:61:f3:59:da:c1:4c:d2:c5:9f:9e:
         5b:33:21:95:01:d7:2b:95:66:5b:61:e8:a3:e0:90:bf:85:cb:
         0f:70:28:2b:88:c3:29:2f:d9:6f:6a:29:1b:26:78:89:a2:bb:
         e2:38:78:95:7e:9b:41:30:d4:96:2a:06:b1:b9:88:77:1b:d5:
         1f:a0:dd:91:43:bc:37:dd:ff:b0:f9:e7:2c:fb:93:5d:31:9f:
         2f:94:a3:b0:6f:6e:c0:61:c8:e3:4b:e6:6f:f1:53:a3:d2:12:
         74:d3:ff:57:ba:db:28:08:f8:0b:68:97:34:55:47:b1:c7:bc:
         8f:94:8c:44:4d:39:c5:9c:4b:c3:ee:f3:fa:2f:24:71:bb:66:
         2a:cf:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:46:47 2025 by rpki-client