Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa
File:                     35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa (raw, json)
Hash identifier:          DfsevnUBpfpdWVRyv8Qc1iWpxBwmok7v6PyRwq5R2wU=
Subject key identifier:   64:2C:1C:2E:AE:9A:22:9C:97:5E:C8:16:E6:B6:A1:0D:B8:0E:51:A3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DE4C5837E49965D56283BBB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa
Signing time:             Wed 13 Nov 2024 18:23:14 +0000
ROA not before:           Wed 13 Nov 2024 18:23:14 +0000
ROA not after:            Tue 11 Feb 2025 18:23:14 +0000
asID:                     3356
IP address blocks:        192.57.152.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:4c:58:37:e4:99:65:d5:62:83:bb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 13 18:23:14 2024 GMT
            Not After : Feb 11 18:23:14 2025 GMT
        Subject: CN=9622ee95-580b-431e-9f05-08fc9ee6050c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:bf:13:64:1f:6f:5f:17:c7:5d:69:0e:85:
                    85:ea:bc:c5:eb:b5:b8:e3:d9:e4:b8:56:6a:e7:9a:
                    b0:d0:f0:e4:18:3f:14:23:0c:13:7a:c4:50:7e:e7:
                    ce:57:5c:77:0b:59:f4:af:2d:8f:d2:1d:65:1b:94:
                    97:8c:9b:c9:c1:11:05:3e:75:66:2c:96:b9:32:48:
                    28:f4:ef:51:5a:f4:58:1e:b1:ce:e0:65:be:da:4f:
                    cc:b6:b7:42:fb:1f:f9:e3:a5:9f:6e:a6:03:50:94:
                    db:c0:c7:f5:6e:43:75:31:22:ed:a3:c4:46:92:bc:
                    e3:50:40:9b:cc:b2:b6:1c:27:d7:e4:9b:e5:af:b4:
                    ab:90:93:17:aa:71:5c:d5:c7:6a:64:9a:7b:24:21:
                    17:30:71:6f:30:d8:82:55:1a:4a:74:f3:83:0a:f0:
                    cb:7e:b7:e7:79:f6:7e:ca:c4:ab:94:fa:fe:27:bc:
                    df:40:85:69:71:47:cb:ea:66:5b:d5:2f:69:54:fc:
                    d0:73:59:a2:3b:df:8d:5b:34:40:0b:25:9b:da:31:
                    72:17:e4:81:db:89:5b:81:5a:f6:0b:34:92:96:66:
                    11:b6:d5:80:08:a8:3b:85:b5:8f:71:be:b2:b7:69:
                    50:0d:26:cd:ce:53:ed:ac:70:48:0c:f3:f2:47:da:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:1C:2E:AE:9A:22:9C:97:5E:C8:16:E6:B6:A1:0D:B8:0E:51:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35a0c62c-d62b-3066-a4c5-473f10fd1af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:87:e8:e0:b6:c9:dd:7b:73:25:60:4d:2a:8d:00:c9:01:08:
         0f:be:01:12:a4:b9:51:df:37:e2:ba:34:05:be:f4:7b:c5:ac:
         f8:fc:af:8e:e1:30:6b:0d:b2:06:c9:81:94:12:ca:8f:8f:88:
         99:a3:93:68:21:1a:f2:00:ee:6c:9f:e9:41:27:83:e7:76:b6:
         91:49:bd:3b:e0:61:19:5e:78:7c:a8:f8:a1:31:55:67:64:fe:
         b4:37:f3:01:3b:fd:d6:4d:44:f8:43:10:49:fe:aa:77:9b:60:
         53:97:67:9f:86:40:5d:6b:4b:da:42:92:e2:ee:75:b9:c4:06:
         c8:85:ca:dd:3a:f2:c1:96:8a:77:9b:ad:06:ee:0b:09:3d:9b:
         94:30:19:28:6b:67:62:6e:51:fc:9f:75:83:31:6b:c6:61:2d:
         7c:f3:af:3e:be:03:7d:89:58:09:d7:bb:a5:eb:d6:eb:9c:01:
         ba:6a:58:d3:b3:1a:b4:be:a7:1a:5a:6e:d0:5b:ae:2c:b3:84:
         bf:b6:ba:f8:e3:b0:3e:28:5e:49:38:1e:d7:05:56:26:85:67:
         7b:69:a3:1a:fe:47:61:4f:4e:56:8e:97:d4:87:34:3d:a9:c2:
         d6:99:5d:07:26:a3:d2:3a:5a:8f:6b:4a:7f:f0:de:0c:42:ef:
         dd:aa:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:07 2025 by rpki-client