Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
File:                     bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json)
Hash identifier:          FBgADxz5abiGC7q3CKyzZ/skL6KxOSRTQFkCemp8I+s=
Subject key identifier:   A7:D3:4E:C7:12:D3:4E:2E:6F:3A:22:1F:C2:70:9F:37:39:31:7B:DE
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847FF4A4A6A593D566053EF82A0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     33141
IP address blocks:        24.38.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4a:6a:59:3d:56:60:53:ef:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=4fb786c7-d61c-496d-9394-06c83ece8b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b2:55:0b:47:26:52:86:99:9f:4e:f5:8f:
                    d0:9a:27:47:c3:2e:a6:16:91:e5:74:d4:6e:db:cb:
                    a4:a7:38:dd:65:73:dc:34:09:38:a0:a0:ac:f5:04:
                    ec:ce:39:ae:d3:35:60:1a:70:bb:c6:df:9d:8d:b6:
                    62:a9:84:9d:21:82:27:6e:0e:37:30:2b:74:7f:e5:
                    65:fd:5a:58:19:4c:67:55:33:1e:cc:0b:08:a2:7d:
                    1c:62:ac:03:31:91:f2:60:9e:4a:07:c2:fe:fa:47:
                    96:49:12:5a:81:44:0e:cb:be:71:65:7d:d8:5f:55:
                    75:ba:b2:6b:e7:54:c2:8b:a8:56:67:1e:2d:d5:ff:
                    a7:b6:1d:9e:dc:be:a1:a2:93:2e:d2:bf:1c:5c:32:
                    f3:61:11:87:12:a6:46:73:7e:ef:6f:cd:fe:49:41:
                    56:0a:f7:b4:7a:64:f6:53:62:95:8d:59:dc:a9:ef:
                    91:75:6d:70:28:7e:e5:03:9d:f4:8c:b2:19:7e:4c:
                    c8:85:9a:00:c5:60:1b:93:2d:14:0a:7d:40:a2:01:
                    92:9e:45:b1:53:f0:3c:a5:40:0f:c1:0c:c5:77:97:
                    c7:6a:11:1f:58:46:18:6b:55:1f:a2:91:6b:1a:b7:
                    8b:37:d6:81:06:d9:70:f9:80:16:c9:f5:34:59:5b:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:4E:C7:12:D3:4E:2E:6F:3A:22:1F:C2:70:9F:37:39:31:7B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:e9:4a:f4:d6:e0:f5:79:55:c2:84:af:a5:07:2a:4d:69:5c:
         4a:c9:ac:e1:5e:c7:20:7b:25:b5:d0:d2:9c:85:29:ed:6c:54:
         63:1e:41:d2:1f:1e:79:8c:6a:c9:1e:c9:78:48:cd:bd:e7:72:
         0e:f5:eb:c5:74:cc:de:3b:f7:b4:a7:4c:37:b0:14:1f:ac:ab:
         dc:27:3a:c0:5f:76:1a:93:15:07:97:da:31:6e:50:08:29:82:
         00:20:f9:99:11:f6:6b:53:9d:3b:11:c1:bc:24:fc:20:90:f8:
         f5:31:b8:4f:90:f0:39:14:e0:6f:c5:13:16:5e:0b:c4:a9:d1:
         cc:68:19:63:21:98:6f:e7:e4:24:df:2f:dd:0a:c4:b5:58:9a:
         c6:ec:6a:ba:a4:6d:9b:fc:27:7b:c8:d5:d2:b7:f0:1c:e2:a7:
         9e:9c:b9:b8:30:e4:8b:6f:b2:61:47:45:29:13:91:02:fc:af:
         79:00:c8:ae:06:b4:7d:52:d3:48:70:7e:1b:63:9c:3a:7b:3b:
         c5:6f:e8:fd:c9:d1:09:ff:a8:ea:95:30:e4:52:b3:6e:b2:fc:
         b7:a9:3f:46:ff:2a:8f:b0:db:fd:d5:8b:47:a4:0c:57:7f:44:
         c5:cc:00:5f:aa:0c:0a:58:af:21:dd:c0:97:28:b9:ed:1b:c2:
         3f:a1:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:26:36 2025 by rpki-client