Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/beb5617d-d4ea-3056-9dc3-7131116b35f7.roa
File:                     beb5617d-d4ea-3056-9dc3-7131116b35f7.roa (raw, json)
Hash identifier:          QaE9LZrw9nAlcUzlHmmB71NR3lkI6iCR1kTFSYatcH8=
Subject key identifier:   7A:75:B6:31:02:26:95:D8:AF:0B:71:25:34:7A:70:90:50:5A:74:FC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858484C1012F3BE774B2733A14380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/beb5617d-d4ea-3056-9dc3-7131116b35f7.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        15.176.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:12:f3:be:77:4b:27:33:a1:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=4ac43d6e-4fc9-4b56-a76f-f39ce367f937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:79:85:bf:11:c8:43:80:96:d8:b9:1f:1b:
                    61:f6:01:87:d0:26:f8:47:de:ff:17:98:13:52:cf:
                    fd:77:1c:17:2b:ff:1f:22:ad:20:9b:9c:35:4e:49:
                    31:d4:3f:f2:d6:9d:c8:26:e8:06:b0:17:b5:63:b5:
                    be:42:29:6d:f5:9a:22:98:dc:ba:63:f4:57:24:7c:
                    ae:eb:23:2f:90:2a:da:05:a5:9d:6f:4a:31:c8:4a:
                    04:1d:10:5e:36:3d:1b:9a:7d:2b:d2:60:39:66:c1:
                    48:c9:5f:b5:00:95:bf:83:5e:51:9f:9b:2c:c4:b5:
                    bb:22:82:b1:95:c2:03:42:dd:6f:ec:c7:26:b3:da:
                    87:a7:49:0b:4c:5d:ee:77:f1:03:d6:77:1d:30:4a:
                    84:45:be:71:3f:fd:e0:03:14:f2:e7:77:ec:54:ab:
                    58:cb:10:37:ac:21:6c:4d:67:ae:12:88:5d:2a:69:
                    cb:1d:06:06:8f:73:3c:34:57:94:93:85:ab:4b:5b:
                    07:0c:18:45:ac:47:15:0d:da:ca:0e:bd:a4:54:43:
                    b2:79:a3:ec:3a:af:c3:3d:c7:b3:d9:7b:dd:26:29:
                    90:c7:16:97:16:26:cf:d9:fb:6b:7e:0a:43:84:f8:
                    41:10:0f:5b:17:1d:12:09:8b:05:c8:de:73:17:af:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:B6:31:02:26:95:D8:AF:0B:71:25:34:7A:70:90:50:5A:74:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/beb5617d-d4ea-3056-9dc3-7131116b35f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:e6:12:9e:6c:48:53:03:9a:5c:94:59:01:f6:7f:75:56:
         96:2b:55:92:6a:5c:ae:d2:0d:7c:11:13:99:0a:5f:99:3e:d3:
         e8:54:5a:01:8f:36:e4:15:42:d1:ce:9d:04:a9:23:cb:d5:19:
         d4:e0:e1:33:7a:40:90:cb:9c:d3:75:fa:f7:f0:15:d3:38:6a:
         7b:21:88:0e:44:d5:98:79:20:81:58:70:73:59:aa:20:5f:4e:
         b7:82:1f:c5:da:ff:c3:90:6d:d0:05:ab:20:3a:f4:7a:75:67:
         d1:c9:5c:ef:fe:14:7a:80:18:d1:28:16:3a:13:c5:08:25:06:
         e4:40:d7:26:0c:75:52:38:e1:be:f6:bd:af:31:d0:6e:2e:74:
         47:e0:40:a3:7f:f8:24:ac:03:3d:36:25:e1:f1:45:94:3f:de:
         3a:9e:71:cc:7c:24:5d:98:2d:8d:bc:25:f1:a9:8d:5a:60:48:
         7b:f7:4d:6c:66:f3:a9:4c:36:32:c1:2b:63:e0:a6:26:26:49:
         5d:bd:df:1e:62:09:0b:14:2e:b5:82:00:ec:2a:72:cb:51:ff:
         4e:a9:fb:e7:ed:ed:ad:9c:72:55:f4:bd:08:0c:23:b8:02:0e:
         32:c9:42:a2:2a:cb:cf:95:96:b1:67:9d:b6:b4:27:5c:71:0f:
         21:e0:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:25 2025 by rpki-client