Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa
File:                     3de0c2d5-a779-3444-afd7-ea90488fb855.roa (raw, json)
Hash identifier:          gr/cfaOB63IwXd/44GbyW6ZCUzODdHy3E8rTm7aEMvk=
Subject key identifier:   32:E5:7C:E9:3E:D4:35:B5:BB:0B:46:73:F6:F4:FD:74:A1:3B:64:3F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F022BA789AE8AE8FB43180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        192.57.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:22:ba:78:9a:e8:ae:8f:b4:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=3f2f07f5-dede-40a3-857c-89bf231cd98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:85:de:42:ba:a1:84:2b:68:ba:86:0e:56:
                    3c:76:7f:db:08:3d:7b:26:12:f4:c7:55:9a:cf:c6:
                    c0:2d:55:ba:35:9b:63:46:73:9a:5e:19:bf:ba:75:
                    40:9b:65:24:bb:51:e3:f1:c5:76:0b:e4:39:8d:df:
                    ff:7b:62:c6:e8:ee:ba:4c:82:71:bf:eb:3d:a1:26:
                    af:27:2a:03:af:ee:09:22:89:a7:82:93:68:61:be:
                    b2:7c:4c:c2:71:48:dd:bb:e5:d6:95:2e:09:eb:70:
                    af:d3:ee:ad:1a:33:98:22:aa:1d:9f:24:79:38:98:
                    b0:d1:fc:d7:47:ef:f5:9a:dc:9e:dc:f4:36:56:e9:
                    8f:79:fb:e5:eb:3e:73:3e:f0:1a:1b:0a:7a:83:fc:
                    5b:6c:5f:37:fb:29:b1:2d:f6:5c:fe:a2:63:f1:80:
                    af:a7:0f:6b:54:52:c2:83:74:1d:29:da:1d:d7:d4:
                    ea:1b:63:23:a0:b6:be:6f:bd:f4:13:9e:69:f7:ea:
                    8d:63:04:10:b0:c2:13:f9:ad:b7:aa:7d:c0:8c:7e:
                    d2:c0:3a:df:7f:36:55:88:6f:de:1e:68:e8:4c:5b:
                    22:18:3f:4d:dc:d6:22:dc:3f:e0:ba:1e:f7:c1:9b:
                    ee:ec:34:67:a6:2d:11:96:f6:3c:f3:b1:3f:a6:ed:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:7C:E9:3E:D4:35:B5:BB:0B:46:73:F6:F4:FD:74:A1:3B:64:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3de0c2d5-a779-3444-afd7-ea90488fb855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:db:6f:58:ab:1e:6c:3c:5d:38:9c:3c:a1:45:df:8c:14:
         22:eb:47:47:68:52:17:8e:1a:6c:ba:a7:d3:98:43:5d:ff:31:
         d0:3a:c0:af:e0:3a:b1:a0:6c:50:52:6f:73:92:db:ce:85:f0:
         f8:4a:34:37:1e:d9:62:db:ea:3a:a7:75:2f:6a:0d:da:32:eb:
         17:cc:e0:44:45:ad:d7:ae:88:75:f4:f5:a4:13:29:e5:e1:59:
         d0:93:4e:5a:23:27:e6:86:75:62:4c:48:85:56:fb:32:40:4e:
         ad:66:5f:48:75:b5:a8:7e:e1:d2:93:ff:d3:55:31:2c:71:a3:
         88:6c:00:9a:71:39:8f:72:01:6d:c3:58:6a:21:38:22:c9:95:
         5b:3c:b6:44:36:e5:a9:a4:a5:23:de:5c:e9:c5:80:04:c0:11:
         ee:cc:e0:4d:0a:9c:23:bd:f1:e8:9d:7f:bb:40:c9:78:8d:a4:
         5a:22:39:6b:2a:a4:fe:c8:0f:96:84:58:07:16:f0:a8:7c:35:
         8b:bc:55:ea:1d:2b:7c:2e:a7:ad:67:32:96:2f:37:fe:06:13:
         a8:c9:20:62:da:d2:44:17:3d:b0:31:00:c9:07:b8:e4:39:72:
         84:b9:ec:ce:28:f5:fd:7f:34:a7:c6:a6:13:af:8e:f0:eb:bd:
         45:07:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:12 2025 by rpki-client