Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa
File:                     4331cee6-586b-3678-9efb-30032ba47a0c.roa (raw, json)
Hash identifier:          XPocDxtCmjI3+LClw1/5TG7R0dZcVKSrjibhHcY6Q6E=
Subject key identifier:   6A:FB:DD:28:87:1D:D8:70:84:CA:70:E9:2C:42:F1:81:DC:0D:6A:84
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DB03BC3E4BE05DCB86664200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa
Signing time:             Tue 12 Nov 2024 14:09:30 +0000
ROA not before:           Tue 12 Nov 2024 14:09:30 +0000
ROA not after:            Mon 10 Feb 2025 14:09:30 +0000
asID:                     3356
IP address blocks:        192.57.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:03:bc:3e:4b:e0:5d:cb:86:66:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 14:09:30 2024 GMT
            Not After : Feb 10 14:09:30 2025 GMT
        Subject: CN=52974f6b-0c29-4edb-b8f9-69636fb22de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:57:94:53:48:7b:34:3a:ce:a0:92:ef:ec:
                    d4:a0:5e:11:4d:9b:b5:66:95:ea:39:fd:56:4c:bd:
                    77:5e:e2:a5:b3:ae:33:e7:5e:1f:96:44:e5:ac:42:
                    7d:6d:ea:82:85:a0:3a:ff:3d:a6:4a:57:c7:aa:dc:
                    a3:e3:71:cb:b8:f2:58:7f:18:c4:78:c6:da:10:a0:
                    42:2f:87:0e:f0:0a:b8:4e:2e:26:01:39:7c:29:07:
                    16:62:cd:fc:77:93:30:1e:0f:aa:3b:3f:ca:fc:57:
                    f0:ec:00:01:54:94:c0:9d:9d:18:86:d2:5d:2b:cf:
                    99:2c:6b:bc:15:7d:c5:db:d5:37:20:10:8b:25:bd:
                    42:9d:6b:f0:6d:9b:e5:6b:b1:c7:4e:49:45:73:40:
                    de:3b:6f:28:c2:e1:24:1f:c0:67:19:06:d6:11:ca:
                    d4:d8:98:cf:59:0e:68:49:28:e4:b7:bd:5d:04:14:
                    1a:17:fe:a3:02:e3:c6:d6:93:f5:2a:92:12:4b:83:
                    fa:8e:c0:10:69:83:1d:e2:b7:f8:70:5a:b2:e5:04:
                    6e:0a:64:45:8c:fd:6a:84:19:b2:73:8d:47:a9:04:
                    42:6b:9b:f7:73:15:66:3f:c0:1f:29:86:a8:92:91:
                    da:90:70:3a:29:fc:32:99:92:97:25:22:86:09:fc:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:DD:28:87:1D:D8:70:84:CA:70:E9:2C:42:F1:81:DC:0D:6A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4331cee6-586b-3678-9efb-30032ba47a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:57:ed:70:f4:8c:89:f6:d1:11:88:70:d7:17:d2:59:4c:fb:
         48:16:32:b8:d0:e0:ab:f7:f7:82:80:0d:6e:7c:10:4e:38:d9:
         83:02:24:4f:e3:51:6e:f2:9a:18:2e:e2:cb:8e:4a:cc:24:89:
         6c:b3:53:69:08:07:98:81:24:1b:5f:8a:af:f2:db:74:b8:4b:
         27:74:69:4d:43:ed:6d:3d:03:8b:a4:70:2f:79:13:89:ce:af:
         c5:21:de:dd:53:be:50:d0:ae:f6:a1:bb:30:5b:1c:26:f7:33:
         e1:a1:a4:be:74:59:37:f2:69:60:52:a8:24:95:0f:92:93:7c:
         4f:68:9c:60:a5:f5:5f:1d:b8:9d:e7:81:1f:29:b5:f2:54:dd:
         e3:6d:df:7a:c0:9d:3f:75:13:a7:dc:1e:64:67:73:69:e6:f0:
         ce:0c:ac:4b:fb:44:e6:18:22:ca:3c:c8:f2:3f:09:0c:c0:70:
         16:3f:09:96:f0:f0:b2:99:9d:ac:53:ac:a7:90:df:eb:b9:c1:
         9d:86:37:10:fa:eb:c6:fc:70:10:02:7d:bb:3b:86:65:86:70:
         f6:2e:1b:ca:ad:60:d1:3f:09:29:ca:ca:1d:9d:9b:20:f5:6f:
         2a:04:cd:40:f3:98:98:78:e3:8a:fa:8b:5f:48:7c:a2:1e:2b:
         c4:5c:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:49 2025 by rpki-client