Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30830ccb-7871-39f4-92bc-99469acc1c63.roa
File:                     30830ccb-7871-39f4-92bc-99469acc1c63.roa (raw, json)
Hash identifier:          bGhS7ZBDNkn1JPWeecUz6R62d169qxstHsEmPcHAe9g=
Subject key identifier:   2B:6B:86:08:5A:A7:76:64:AF:2F:F6:6F:F0:B0:9C:10:E5:B8:31:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F022E5D870DC383F0CC100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30830ccb-7871-39f4-92bc-99469acc1c63.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        192.57.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:22:e5:d8:70:dc:38:3f:0c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=00396ae6-657c-4a15-8d98-b8383eee59b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:8a:5c:a5:e2:e6:ae:c7:9c:b2:30:3b:9c:
                    d1:d9:bd:ba:3e:15:f8:fa:38:af:1e:4d:33:83:e5:
                    da:c2:b0:08:e1:b0:e8:03:c2:f3:9e:9c:d1:e1:91:
                    70:3b:ed:07:85:9a:0a:8e:2f:22:f0:3d:f0:7b:a9:
                    84:a8:49:98:fa:5d:2d:08:53:51:51:84:68:b7:75:
                    ab:3d:81:b8:44:8a:67:da:3e:6c:2e:2b:25:7c:64:
                    ef:62:26:61:6f:0e:e4:52:3d:71:cb:12:8c:71:b2:
                    3b:cd:f6:63:9e:63:e3:af:42:a8:e5:ec:79:cb:cf:
                    ed:61:1d:7d:90:9e:29:1c:c3:66:f4:c0:8e:c8:6b:
                    11:8c:dc:fa:2d:41:3d:b9:90:a4:61:0d:9d:94:be:
                    2b:c1:1c:0b:9b:ff:57:3a:27:97:42:e0:9b:0e:e9:
                    f5:e6:a6:2e:69:30:a9:66:4a:2e:ac:fe:5e:e5:4e:
                    11:7e:cd:63:ed:d9:9a:6a:ba:55:8e:d2:14:a2:1e:
                    cf:86:fa:31:9b:f2:d2:d4:29:91:f2:b8:0c:d3:60:
                    ca:9f:14:48:ee:b4:b4:6e:af:ea:0d:8f:0f:1b:1d:
                    7c:99:96:cf:63:01:33:eb:39:e0:40:ac:27:60:3b:
                    79:84:0b:29:c7:a2:d6:dd:1a:c0:33:c8:b7:47:bc:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:86:08:5A:A7:76:64:AF:2F:F6:6F:F0:B0:9C:10:E5:B8:31:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30830ccb-7871-39f4-92bc-99469acc1c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:31:fa:fc:f4:ec:01:72:22:3c:61:92:78:b9:06:da:df:2b:
         bd:28:7a:de:3f:46:9b:2c:5c:7f:41:f8:02:4a:d1:64:ad:5f:
         dd:75:1d:64:f6:89:54:3d:15:f3:7d:35:1f:0c:4e:e6:d7:b9:
         18:f4:59:01:fd:48:d4:8d:26:51:80:4e:a0:bb:c2:00:7a:a0:
         f1:0f:30:80:18:cd:0c:23:b4:f8:72:05:1c:e1:3f:62:94:6d:
         8b:a7:84:c8:85:e3:ab:47:97:b1:ad:9c:78:e7:1b:c9:78:33:
         6d:52:d4:bb:b4:8c:19:46:f2:88:2d:45:a2:82:6d:af:21:d9:
         0e:dd:00:cc:07:df:0d:17:a2:e8:74:40:b8:78:53:d5:d1:36:
         c0:66:fb:e3:b4:6e:8e:04:e1:9d:6a:02:9b:20:c2:8d:fa:d5:
         d4:06:f7:64:4e:91:a5:19:cd:13:52:40:66:ff:f3:72:ad:3d:
         7e:59:a1:a3:ca:74:d8:6e:c7:c3:b7:fd:6e:60:48:85:a6:7b:
         eb:52:7a:24:16:cb:80:e4:e5:92:15:45:9d:54:b6:ad:bb:29:
         ce:3f:b0:7c:3a:8c:be:d6:f1:f5:1f:e2:23:48:1b:bf:d8:f0:
         f5:47:d4:7f:d1:70:12:e7:38:dd:db:f3:c6:25:f2:1a:0c:d5:
         c5:58:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:52:11 2025 by rpki-client