Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa
File:                     531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa (raw, json)
Hash identifier:          jM1NC7e/BWqT7xEsCvnkegD9vUujPTZ2xG2QJTV09oI=
Subject key identifier:   38:36:0D:79:68:82:AB:96:FF:95:FD:AB:E6:3B:75:7A:6A:FA:0D:AA
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285848159FE518A578DA2CEE8BCCC0
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     13984
IP address blocks:        209.151.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e5:18:a5:78:da:2c:ee:8b:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=59ea8a30-d522-43c3-b072-0abcd271b72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:cc:a8:87:12:55:ca:c2:3b:15:a7:cb:98:
                    c2:0d:90:9e:94:84:b2:7c:fb:54:fa:8d:38:ed:c4:
                    89:8f:96:fc:71:50:db:33:84:09:06:09:e1:f5:f1:
                    42:ec:6a:71:77:95:f0:bb:ad:1d:4b:96:16:0e:93:
                    85:3a:b0:03:1f:a1:ab:f2:95:ca:7f:45:08:5c:51:
                    2a:be:e8:82:9d:ee:35:59:f9:34:cc:46:15:8a:7c:
                    f3:91:4f:70:dc:3f:d8:df:0c:aa:dc:d1:71:f8:1d:
                    3c:16:3f:b1:b0:59:9b:04:a9:6b:75:55:cd:31:70:
                    49:73:92:dd:50:18:15:04:ac:49:e9:15:5d:ad:fd:
                    26:cc:22:e1:ae:97:c9:86:af:dc:98:f5:f8:84:e0:
                    1d:55:c9:4c:7b:6f:53:1f:d2:fb:ab:60:a3:76:b0:
                    37:3b:f2:5f:24:9b:22:f0:06:d1:bf:3f:ce:94:b6:
                    69:13:9b:b3:78:9b:fa:32:b6:b1:84:d5:03:eb:a9:
                    1c:d2:09:bb:f0:8c:9c:bc:df:53:01:23:78:cc:7d:
                    2f:6c:11:6a:96:29:09:df:08:b7:38:ba:6c:1f:6f:
                    d8:92:9a:36:b5:0a:46:4a:80:55:9a:95:34:f8:92:
                    2f:e7:4c:a2:85:35:2e:e7:00:20:45:6a:d2:10:c3:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:0D:79:68:82:AB:96:FF:95:FD:AB:E6:3B:75:7A:6A:FA:0D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:85:65:5c:0c:f3:3f:4e:80:d8:e0:c7:85:f6:3b:4c:e4:
         23:e0:a5:ca:37:d8:69:36:5a:6b:74:f4:df:f5:76:99:26:ca:
         7e:c8:38:2d:d9:3d:93:66:22:50:1e:50:a5:89:14:4e:08:4d:
         83:e3:d7:1c:44:fe:8f:34:b5:ea:47:63:6a:5f:c6:ec:92:fb:
         21:4a:8d:dc:fb:78:69:9d:e2:01:a5:78:f8:cc:d0:eb:8e:b4:
         3b:17:92:93:2b:0c:2d:33:52:97:a8:65:ea:3c:1b:ea:ca:34:
         3a:35:26:21:9c:7a:3a:28:74:b9:ec:fa:65:0e:d5:f0:78:4b:
         18:bc:4a:04:4b:f4:1f:19:d4:72:f8:50:d2:8d:3a:25:09:59:
         e7:d0:b6:92:f1:1d:8d:16:85:2c:6a:80:73:e4:fc:9d:da:64:
         a2:46:f7:4c:3d:49:dc:1e:62:14:db:95:80:e7:af:00:75:21:
         49:da:83:20:39:39:15:93:9b:dc:30:06:5a:f2:7c:c0:c6:7e:
         6a:c4:db:61:1f:ef:94:a4:20:e9:dc:f4:bc:ae:4c:35:5e:1a:
         7a:bf:54:c7:30:b9:2f:99:6c:a5:d3:66:0d:1d:bf:59:a7:4c:
         d5:2d:b4:5b:98:34:94:90:82:a7:69:8c:47:bb:ee:b4:06:0e:
         fa:af:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:22 2025 by rpki-client