Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
File:                     c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json)
Hash identifier:          BIjWNXQcdx8ZAikxjN6/OYvTlJhrlwzKzL5T7VpnB+w=
Subject key identifier:   33:5D:EB:25:6A:E6:12:FA:B5:AE:BF:12:0F:9C:95:28:12:AF:3A:CC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB5434939F73FD1A43BC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        72.31.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b5:43:49:39:f7:3f:d1:a4:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=6d658490-a329-47b0-9721-233cde4678c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:7c:8c:28:e5:09:ee:8c:a3:e2:ed:a4:28:
                    fc:6c:2f:70:5a:f9:b2:62:66:34:4a:54:d3:54:cf:
                    43:5c:11:ea:4f:24:57:a2:50:bf:e5:ff:ac:1b:90:
                    a2:44:a0:4b:e0:12:55:38:3f:dc:6b:f5:ad:9b:20:
                    b1:f2:1d:0e:76:37:e9:ed:34:a5:d7:0d:71:54:77:
                    57:1a:ca:9f:bc:88:9f:09:d1:d5:22:fb:b8:20:f3:
                    76:e9:79:4f:91:d3:ea:19:f3:f7:17:dd:6b:9b:f8:
                    38:78:ee:ab:dc:67:09:7a:b9:34:d1:3c:f1:c0:ab:
                    32:d8:76:97:05:71:42:25:e9:dc:0c:36:dc:9e:d3:
                    f6:23:45:5d:8a:e6:81:f2:28:c1:11:9c:3d:90:56:
                    5c:e8:4b:6b:15:15:e9:84:ff:50:4c:6c:03:75:02:
                    6c:c6:81:ca:c6:ff:b9:04:8a:65:1c:dd:50:e4:69:
                    80:72:45:c2:85:f9:bb:36:28:71:d3:50:3b:54:c9:
                    fa:9f:77:f1:2e:0f:9c:4e:6c:e1:71:aa:3c:a9:42:
                    50:ff:46:6f:0e:e2:ab:da:e0:f1:66:f5:04:74:5e:
                    ad:dc:5a:a3:dd:3a:51:fc:28:8f:c3:43:03:78:e2:
                    f2:83:58:5c:81:d3:26:9d:97:a1:c4:74:7c:f5:75:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:EB:25:6A:E6:12:FA:B5:AE:BF:12:0F:9C:95:28:12:AF:3A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:1c:75:12:f7:f6:ba:a7:50:ae:9b:db:08:54:03:19:9c:
         61:e4:57:5c:04:f9:52:72:41:d4:cc:cf:7e:05:6a:0a:f2:f8:
         6f:1f:d7:fe:09:4e:11:25:c3:61:87:c6:95:d1:a4:b0:66:ba:
         84:ef:75:06:d3:52:db:81:cf:c3:48:8f:fe:7d:7e:77:1e:d1:
         cd:24:08:c2:f9:0c:d5:2f:d1:b3:cb:3f:9d:7a:1d:b2:e6:39:
         95:4b:fe:6b:33:2c:28:2e:40:32:96:7a:4f:74:dc:bf:c8:07:
         94:f5:cc:3e:99:23:9b:3c:d1:d3:11:58:44:09:8e:99:5a:37:
         95:e5:62:f3:65:cf:51:0a:5d:4c:ba:38:7c:34:5b:9b:0c:4e:
         27:98:97:14:d0:1d:a4:13:66:a9:ef:b7:0f:b1:9e:8f:4e:05:
         ff:39:52:32:35:a5:f3:cd:fb:13:b0:90:a2:45:7d:26:95:85:
         4c:14:5e:db:09:70:a1:11:e1:f5:74:2b:21:7c:d1:6f:7f:83:
         c2:00:e8:e6:3d:49:f3:bf:ec:19:ec:e7:39:2f:9b:a3:d4:8c:
         d9:42:a1:7f:88:62:ac:2f:b3:3d:4c:fa:de:09:67:4e:6b:fa:
         40:43:4d:f9:58:ed:fa:a8:47:cc:04:f7:db:a6:72:3c:1d:c7:
         58:d1:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:16 2025 by rpki-client