Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
File:                     2509d60e-c681-37b3-adcf-bad08087cd10.roa (raw, json)
Hash identifier:          sl+k+6fPPxqh9MkmvV+3xKn1WXLTjB07ATsbosFaXEo=
Subject key identifier:   09:DB:AF:17:20:76:2C:3C:5A:9D:4A:3C:E1:0A:B1:CC:41:D1:45:15
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858481F6529924A66EE895A2D11E0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     53640
IP address blocks:        24.38.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:29:92:4a:66:ee:89:5a:2d:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=92e094e2-ec81-41b9-9ebf-888cbe4b0a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:4c:e4:8e:45:6e:1d:36:d6:35:53:a7:0d:
                    e1:0a:c0:0d:4e:d1:b8:54:fc:e6:e7:11:36:7e:37:
                    62:53:b2:14:cb:f0:72:db:32:76:24:d6:a7:5e:a5:
                    26:eb:af:0e:ad:9e:70:64:f6:d3:43:2c:2d:8e:31:
                    dd:ad:12:b8:8d:1b:8e:3e:0c:4d:8a:05:53:34:a8:
                    5e:cc:4f:63:65:27:67:c7:c9:3f:37:cb:dd:cd:a4:
                    71:65:a6:7a:ca:b7:a2:31:4f:3a:85:a2:1f:8e:d5:
                    fc:f6:dd:fe:2e:8d:d6:85:88:05:15:b2:d8:7f:26:
                    ce:46:bf:77:b1:f8:5b:9e:8e:d4:c2:e9:74:5e:39:
                    2f:f2:ed:85:57:1e:5d:1b:f9:ba:bd:a8:7f:a8:d0:
                    ea:72:52:3c:e1:00:0f:54:f0:91:59:b8:69:b1:c5:
                    f7:43:61:70:7b:f7:3e:bc:e8:75:4b:f2:b8:fc:36:
                    8d:f2:15:af:e3:1e:95:7d:a3:ff:7f:36:8c:3f:aa:
                    01:23:03:43:cc:35:cc:c5:95:c1:da:b7:25:a1:db:
                    19:de:17:11:f3:3f:e4:4b:c8:a3:aa:c1:c8:43:73:
                    46:57:44:34:9b:dc:45:d2:9c:3d:d8:9b:d8:80:ab:
                    2f:eb:b3:ec:8e:4f:f5:a4:da:7d:ca:48:7f:60:e6:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DB:AF:17:20:76:2C:3C:5A:9D:4A:3C:E1:0A:B1:CC:41:D1:45:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:cd:a7:85:c2:a2:20:1e:31:4c:bd:19:35:15:92:19:34:
         8a:8a:9a:ce:8e:dd:7c:ca:bf:43:7d:b8:a5:0a:87:f0:e0:4e:
         44:7f:50:1c:65:67:60:0a:61:85:a4:35:7d:2d:ca:0f:9b:04:
         dd:0f:50:3b:7b:4f:48:a5:3c:ae:fa:c7:f8:05:b7:aa:2c:a1:
         1b:05:96:fb:aa:9e:be:12:0e:0a:99:24:f3:08:a4:58:d7:c8:
         62:8f:cc:32:a6:00:ec:7a:bc:d8:de:1d:bf:3a:d7:8c:d7:ff:
         fa:9e:3f:57:c6:c7:c0:4d:13:c6:e1:16:8f:19:be:53:63:dd:
         0d:0f:da:bd:ff:13:ab:55:a2:f7:fc:b5:d2:03:13:d8:0b:3a:
         ac:63:36:2b:65:34:3a:8c:cc:31:63:6a:a5:c8:a9:fb:6a:e9:
         a1:9e:3a:c3:12:9e:8b:25:4e:b9:55:2c:6f:dc:ff:46:17:ec:
         8f:7e:5a:1a:e3:63:f1:1b:bf:ae:fa:57:6d:c0:3e:aa:87:0a:
         1b:54:14:b9:77:d2:32:cb:ac:da:8b:a6:24:0e:a1:73:b7:cc:
         c1:9f:90:0b:ec:ad:a7:9a:9b:df:de:b1:2d:2b:5b:97:0a:4c:
         84:ad:0a:ec:27:85:6e:63:a8:31:d2:d2:a3:ae:96:dc:c7:f4:
         8f:3a:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:29:46 2025 by rpki-client