Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
File:                     80755ad2-291d-3607-a051-91a54d179246.roa (raw, json)
Hash identifier:          gFEsluiwkHPv7dY5aZWWsd4vLjzD4Xlwn9LUKtpnyFE=
Subject key identifier:   0B:4C:EC:D8:AB:FC:0F:E7:9B:2C:2F:68:36:1B:E5:E8:6F:AC:97:B1
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F4328584819CFD82CCA906A5B00CBCE48
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     22363
IP address blocks:        216.168.4.0/24 maxlen: 24
                          216.168.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d8:2c:ca:90:6a:5b:00:cb:ce:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=5f014db4-db22-45b7-9487-9bf4d2aabbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:11:b1:61:29:12:94:0a:23:04:f8:4b:d7:3b:
                    a7:b6:8a:fd:fe:f0:92:49:86:db:ee:67:f0:91:68:
                    86:6c:2e:ad:08:a0:32:17:c6:7a:96:cf:ca:a7:2a:
                    02:19:f3:18:6f:14:02:aa:06:68:2f:57:a8:18:3e:
                    53:9a:f1:d8:6e:fa:9d:ce:09:6f:30:6a:4b:d6:56:
                    0f:4e:ef:e3:a1:76:20:df:99:1b:58:bf:c1:aa:9c:
                    1e:45:02:e7:8d:a6:cc:61:df:62:88:e9:38:78:c0:
                    0c:d3:3d:83:7a:5c:ff:0d:0b:5a:b1:80:9a:bf:e6:
                    22:fd:10:52:98:66:55:08:37:af:6c:14:7e:38:f5:
                    25:3b:33:66:3b:41:31:d5:3e:56:e0:94:e1:ac:cb:
                    3f:4c:7c:6b:23:cb:4d:33:24:ac:72:4e:a3:e2:b8:
                    fc:35:59:13:1d:e2:99:b0:a1:9c:ab:a0:5d:7c:7e:
                    8c:0d:31:ca:9b:dd:06:07:c7:c9:e4:57:d0:c5:83:
                    6b:26:4d:71:ad:50:be:44:cf:6c:94:bb:f4:d9:7c:
                    3c:8b:d8:2a:25:30:40:92:b1:60:5b:ce:41:54:2c:
                    1b:a7:5b:bf:85:c0:23:fd:5e:38:f7:ac:53:01:03:
                    a9:b2:a4:84:b3:2f:fd:1d:cb:65:3f:4e:72:11:d3:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4C:EC:D8:AB:FC:0F:E7:9B:2C:2F:68:36:1B:E5:E8:6F:AC:97:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:94:43:98:bb:dd:dc:86:ed:4c:29:69:4d:79:98:38:ea:de:
         11:de:dc:a7:f8:e7:c8:3c:74:eb:a3:5b:9e:6f:2a:f0:b2:ac:
         91:f5:a4:27:56:0d:8e:16:28:0e:c7:fb:bb:21:b0:ee:f1:cb:
         8c:b2:19:e3:71:67:60:0b:f1:c4:18:fd:49:60:de:59:ee:b7:
         9f:38:2e:93:60:4a:47:3a:09:09:00:86:9b:d6:03:b0:8c:db:
         e3:57:b1:c6:b4:80:20:af:ba:ce:a7:d1:74:33:0d:a8:ee:ce:
         cb:86:f4:b8:29:1c:0e:a5:fc:f6:e3:a5:3e:51:f2:58:69:bb:
         0b:64:23:1c:41:60:07:fb:83:99:67:10:08:3b:19:97:81:a5:
         d6:ae:8f:37:7a:3a:9d:b4:6c:6e:86:59:49:4a:27:2f:6e:df:
         a3:0c:e4:03:a2:b5:ee:6f:59:33:52:88:9d:c4:89:4e:9e:11:
         af:15:65:8e:7a:97:bd:0a:88:43:50:5a:f4:7c:d2:f0:50:c7:
         59:21:6d:35:9d:05:2c:07:a2:25:c7:03:ca:ec:f5:e8:87:05:
         93:b9:2e:3b:94:6a:a0:db:56:ac:fb:e6:02:5b:a5:c0:8c:a3:
         86:c1:8e:cd:4f:c3:29:f7:ea:dd:5e:8f:9d:d9:0b:77:8d:d6:
         71:8d:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:23:54 2025 by rpki-client