Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/9aa43629-b99e-3089-b389-c17fd0d3d095.roa
File:                     9aa43629-b99e-3089-b389-c17fd0d3d095.roa (raw, json)
Hash identifier:          aRKn+4ut3aamhoWt/xHqiobh0K4S3CK83VK1XLM3CPA=
Subject key identifier:   91:01:AA:CD:70:19:01:F6:92:52:CC:47:74:3F:46:5A:9B:F8:04:06
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848696057F49EB90544076E9C00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/9aa43629-b99e-3089-b389-c17fd0d3d095.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     132335
IP address blocks:        216.185.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:57:f4:9e:b9:05:44:07:6e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=8cc850d9-f04b-4954-a016-8c2cea923713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:78:fe:e3:7d:fd:0f:1d:d4:c3:a0:cc:b6:
                    ce:b2:bf:54:91:93:73:02:44:46:9a:cd:1b:42:7a:
                    ad:7c:72:6f:da:35:c3:62:46:01:33:52:f5:78:ff:
                    63:ab:18:72:ed:fb:f9:05:31:6c:08:02:a5:b0:fd:
                    85:c8:e9:9d:a2:11:78:fb:34:67:1f:f0:ce:da:88:
                    d6:8b:8f:7a:07:e4:d6:74:f8:5f:28:30:5c:cb:eb:
                    4f:aa:f1:e0:07:c1:13:29:c6:6f:ca:21:50:c5:33:
                    f0:fb:75:5c:41:9c:19:cf:9d:15:ac:51:74:7f:66:
                    1c:81:fd:1e:10:01:2c:c2:e8:61:a9:1c:49:8b:48:
                    2d:1b:59:49:cf:3f:f1:51:74:14:08:65:8c:b8:50:
                    bf:98:1e:7b:65:4e:c6:6e:b5:2c:38:10:8e:26:79:
                    69:29:70:74:92:19:ab:21:91:c6:b9:97:5c:d0:c1:
                    e7:4b:c4:48:d8:ff:89:50:9e:59:c3:1b:6d:4d:20:
                    94:0c:32:2a:5a:f9:3a:7f:7d:38:2d:73:58:7e:6c:
                    70:22:1b:2f:91:63:f5:98:ca:3c:37:c8:bb:d4:d0:
                    5a:b2:35:2f:0a:10:f8:2f:b1:6e:5c:af:78:8b:18:
                    aa:42:a4:8a:87:64:48:91:35:32:3a:5a:6b:0d:e7:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:AA:CD:70:19:01:F6:92:52:CC:47:74:3F:46:5A:9B:F8:04:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/9aa43629-b99e-3089-b389-c17fd0d3d095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:57:ee:28:6f:05:15:83:f6:f2:ad:9b:87:26:43:8b:10:39:
         9a:58:69:05:9b:f2:4f:b1:4d:8d:53:42:79:b8:f2:d7:12:76:
         9c:af:21:a9:35:03:c0:43:49:04:a7:70:d7:e4:9d:d9:7a:39:
         ee:7c:62:72:78:a1:6c:94:fc:57:51:ca:11:a6:d2:bf:16:90:
         c5:cb:51:39:a3:a7:37:5d:51:d1:24:6c:12:35:31:50:d0:3a:
         15:0e:28:07:c7:20:96:cc:20:0c:e5:43:59:f0:19:fd:94:0b:
         68:64:bf:ec:14:f7:23:09:be:74:ec:9f:fb:d1:5d:63:5e:a0:
         69:12:c3:3c:25:36:f8:f2:d5:5a:ea:bf:44:a9:18:6a:39:55:
         9c:e0:8c:ce:a6:c1:ba:fa:5c:1e:f4:88:d5:27:5a:57:73:22:
         8d:a1:b3:6d:ee:70:86:d8:87:c1:8b:1d:64:11:70:ee:da:7c:
         59:cb:ca:8b:a6:aa:12:4e:39:aa:14:a1:db:4d:24:59:34:c2:
         98:56:ea:a5:0b:79:0d:a3:0f:cf:c6:66:9c:74:5c:31:ef:0c:
         ec:fe:4b:af:2e:78:f0:ff:8f:3c:9c:e6:6a:ee:45:de:8d:d9:
         66:bd:57:9f:f3:24:2a:7c:2e:36:e8:43:c0:56:97:0d:fd:f9:
         3a:f0:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:29 2025 by rpki-client