Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1fd64712-7de3-3828-aae7-9bb3d16b1f66.roa
File:                     1fd64712-7de3-3828-aae7-9bb3d16b1f66.roa (raw, json)
Hash identifier:          5Dp7Whf37KquyW6JZjHCe/xKbnqLKB0f+8aVGl3YWX4=
Subject key identifier:   BF:27:BE:3C:B9:2E:36:E5:C9:F2:EF:1C:9B:EF:77:82:D2:18:E9:2C
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285847F84F7CB16E395BD9642A1528
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1fd64712-7de3-3828-aae7-9bb3d16b1f66.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     58507
IP address blocks:        134.202.64.0/19 maxlen: 24
                          134.202.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7c:b1:6e:39:5b:d9:64:2a:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=1da76cc4-9b5f-496e-a74b-109075111c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:6c:e0:d2:6e:50:35:64:d9:db:b4:24:0e:
                    41:60:e3:f6:9c:3b:a1:73:35:82:26:31:25:26:0d:
                    37:4d:6a:4b:52:9c:38:2b:b5:ba:3c:5c:48:78:f0:
                    e3:ab:e6:8d:84:8f:e1:72:14:8e:ed:df:05:e4:67:
                    86:67:62:4d:fc:14:21:db:6a:a5:f7:fd:0b:3b:77:
                    6d:b0:6a:3e:7a:b0:cb:85:94:02:2b:1d:c0:76:03:
                    d8:b8:24:18:8e:f2:cb:c4:ac:cc:a9:fb:45:84:92:
                    63:46:54:59:31:f6:a7:e2:1d:c3:9f:7c:f9:b5:42:
                    c7:dc:93:19:0b:73:ee:8f:5e:5e:62:db:a3:ab:ca:
                    74:ef:1d:84:b1:e6:78:7c:fe:44:0f:10:5f:29:a4:
                    7e:c2:e9:5a:df:1c:24:94:15:cc:28:a1:ee:4f:c5:
                    2e:9b:a0:9e:66:c4:f8:53:27:f7:7c:fa:75:c1:ae:
                    b5:60:c0:9e:3f:fd:7d:57:30:76:b6:50:09:0e:ac:
                    96:92:07:c2:5f:2b:64:2d:c9:c8:ec:e9:69:8d:d9:
                    62:7c:27:a7:d3:60:3f:32:eb:36:ec:e8:70:24:ec:
                    08:f1:36:54:ce:3f:53:49:2a:3e:94:e3:25:06:06:
                    ff:03:c1:92:3b:38:72:50:27:a1:68:be:41:26:5b:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:BE:3C:B9:2E:36:E5:C9:F2:EF:1C:9B:EF:77:82:D2:18:E9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1fd64712-7de3-3828-aae7-9bb3d16b1f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.64.0/19
                  134.202.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:6f:7e:87:75:2a:e5:9a:02:f8:f2:bc:60:c8:57:2b:23:
         59:99:ee:5b:b4:30:0b:09:8b:4f:af:3a:93:0c:6e:4e:09:36:
         08:91:e2:aa:0e:64:a6:08:b2:73:1a:9f:81:ef:53:e6:c8:73:
         ce:1d:e9:ea:6e:ca:25:bb:71:80:9d:c1:5c:2a:d1:9b:24:0d:
         53:26:7d:93:9d:b1:a9:61:72:a2:cf:8b:45:ed:48:db:f2:40:
         bc:0b:e1:ed:63:b3:98:85:de:ff:59:27:7e:0d:f9:78:45:b9:
         b7:d2:c6:d6:73:cf:c7:22:ec:53:2d:ad:1a:62:7c:36:ff:e4:
         67:f9:79:7b:3a:08:fe:03:da:bd:06:42:ee:4e:83:7c:5a:f5:
         d6:28:4b:d4:91:75:23:44:26:7b:a8:39:46:1f:c6:0f:4c:a5:
         4e:56:af:64:2f:1d:6d:a2:c3:de:56:f4:ae:63:f9:9d:b2:3f:
         6f:95:72:63:28:15:7d:d6:da:58:c3:3f:9e:b0:af:bf:99:f2:
         ec:f5:12:22:0c:b0:17:c7:b2:2f:63:bb:8f:2e:3c:68:d7:c1:
         09:7f:ab:3d:48:d6:0d:f0:c2:d2:97:a9:36:49:fc:e9:51:b1:
         85:d9:0f:06:ff:d2:f9:fb:bd:61:af:b3:99:f4:78:c0:8f:e9:
         62:8f:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:19 2025 by rpki-client