Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
File:                     db5ee974-efb8-37ae-8b96-c339cbc8523b.roa (raw, json)
Hash identifier:          LdsLh0zrnTurGCc8kNWsyVitOu0ZVTuwnaROE3FQvyM=
Subject key identifier:   00:13:46:9C:A7:57:F7:24:55:AE:9E:3F:50:F4:4A:32:89:AD:1B:8A
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584858A05AC5DCA87DB022ED9400
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     397966
IP address blocks:        170.205.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5a:c5:dc:a8:7d:b0:22:ed:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=f6333df4-57e8-402c-b481-ed6cc5217599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:c3:00:93:af:2c:56:0b:c9:e3:ca:06:74:
                    89:0a:48:71:a7:93:c0:e7:8b:a9:b1:bc:0f:82:b7:
                    c8:8c:65:e7:1a:41:bd:3e:16:2d:16:c5:58:3a:3d:
                    b8:b5:ac:26:a5:08:71:2f:b2:48:97:cd:1c:53:1b:
                    d2:fa:82:f3:54:19:00:c6:3f:f7:95:cb:63:c1:83:
                    0c:2f:71:f7:67:11:13:aa:fa:d0:94:a8:bb:c8:9e:
                    00:91:ba:a1:35:dd:a4:97:37:a5:7f:69:50:93:34:
                    98:cd:4d:c3:12:4e:02:36:6c:98:be:a8:f5:8e:5a:
                    9b:d0:9a:43:12:98:81:82:25:65:4c:4a:1d:07:b8:
                    60:56:bd:3e:81:6f:42:2c:ec:b2:d0:ae:f3:e7:7f:
                    a5:79:c7:4f:d5:da:98:d0:ee:96:89:5f:d1:e6:e4:
                    d1:ec:24:39:f8:1c:25:88:0a:61:56:47:e0:da:a5:
                    35:0a:c0:ac:ff:1b:7f:60:15:86:2d:5a:8d:c9:7c:
                    9b:0c:e9:d5:8d:32:94:67:f5:b4:01:77:c3:9e:6f:
                    1b:8f:12:d8:73:e6:6e:f2:5b:c2:a0:b8:c5:9d:78:
                    5d:87:0b:32:94:bc:ae:ae:48:82:71:a4:0c:50:d0:
                    54:14:49:f4:7d:b9:c0:17:f3:9c:d2:96:cc:f8:ad:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:46:9C:A7:57:F7:24:55:AE:9E:3F:50:F4:4A:32:89:AD:1B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:13:fc:7e:cb:b9:e0:92:18:89:82:ec:72:cc:50:19:d8:
         ba:f2:1a:bb:fe:88:9b:c2:b8:58:ea:0e:8e:a4:ab:d2:5f:df:
         c4:45:e4:fe:a7:33:92:67:26:b8:0f:d5:f5:ee:61:84:b4:b7:
         85:ad:8f:da:1e:d8:f9:4d:bc:2e:84:72:19:22:38:e9:09:ac:
         62:de:27:ca:9e:7d:b5:fd:bf:22:41:31:c3:28:6c:5f:06:a5:
         4b:5f:cf:9f:cf:3d:b5:2f:dc:42:8d:dc:d6:db:af:25:6a:f7:
         a8:58:37:8a:75:83:ef:d4:da:ee:41:5a:63:0a:ce:09:80:5a:
         fc:ad:f6:e1:04:f4:79:03:60:4d:85:9e:0e:31:6f:9e:b4:bd:
         50:1f:d0:0f:88:66:c3:ea:50:53:9b:67:10:2f:c2:99:fd:87:
         db:bd:fa:fe:8a:b6:37:0b:40:90:2f:2e:07:cc:16:3f:3f:87:
         d1:7e:34:a8:19:73:6a:b7:9b:fe:c3:25:61:d8:13:25:0f:d9:
         bd:f7:b7:a7:89:41:49:25:48:ff:8c:97:80:9c:4f:f5:dc:a9:
         ac:c3:85:00:66:a0:99:cd:f6:6b:3b:cd:02:24:bb:eb:71:9f:
         d3:c3:94:4a:4e:d1:ef:0c:69:fc:4d:eb:d0:c9:50:65:8f:bd:
         49:41:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:58 2025 by rpki-client