Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa
File:                     d46d4954-1d6e-3a32-a165-6df6a604505d.roa (raw, json)
Hash identifier:          DapMdXUngmV9fQBtCfx9P+TwafWqYBokgydCL0crvl0=
Subject key identifier:   07:C4:C4:36:F1:45:11:25:24:B1:32:11:8B:AD:B4:7C:4A:39:52:8B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F01EDC079E4406E922C6E8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        192.85.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1e:dc:07:9e:44:06:e9:22:c6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a6b4d343-aa4f-4347-a594-29b42a649bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:ed:9c:fb:83:11:a8:f3:8d:22:60:c3:b9:
                    30:bb:43:ae:57:96:0c:07:f7:c0:2e:c4:c7:2d:71:
                    3d:f1:f7:10:72:99:80:db:d2:04:44:8e:15:53:62:
                    9e:2c:00:0f:1d:ee:66:13:f7:b8:94:2a:86:a9:7f:
                    5a:bd:91:e0:6e:45:ec:fc:f4:c6:8f:ab:b1:e4:4d:
                    34:a3:da:f2:ad:d5:37:c6:48:f4:04:fd:c0:5f:a2:
                    bd:9d:82:ee:3f:a2:53:cd:c5:29:82:11:1d:ba:aa:
                    eb:5c:f0:95:19:f5:d5:12:71:60:8a:30:23:e8:17:
                    80:dc:31:be:10:dd:62:9c:58:9b:f0:8b:0d:5c:f7:
                    c9:06:a8:11:12:2b:6d:f1:0c:f4:ad:41:04:90:08:
                    60:87:fb:fa:32:d8:53:0b:26:82:cb:3a:4c:b8:d5:
                    eb:40:b2:32:4b:a1:37:a5:7e:0e:9c:2d:b6:60:d7:
                    eb:5f:c9:05:03:b4:b1:e9:4a:8a:59:90:de:c3:12:
                    98:28:04:c2:ca:69:a9:8f:07:ae:e2:85:ab:79:4d:
                    b5:42:22:db:dd:f6:e3:9d:dc:59:0f:ed:06:a4:6c:
                    38:0d:df:c8:88:b7:1f:c0:b7:05:86:e2:42:d1:cc:
                    d4:da:ab:89:94:8f:bc:4e:08:a1:5d:98:3c:2b:af:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:C4:36:F1:45:11:25:24:B1:32:11:8B:AD:B4:7C:4A:39:52:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d46d4954-1d6e-3a32-a165-6df6a604505d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d4:10:4b:21:bf:98:ee:94:96:ed:e4:16:f4:9d:09:49:81:
         e0:6f:62:a3:9b:14:16:fe:9a:c5:3b:dc:de:c0:dc:ce:0d:45:
         0f:0d:47:7d:2d:0b:f8:0e:48:ab:d1:43:85:1b:53:07:31:35:
         86:28:9a:65:c9:e8:62:ef:1b:fe:70:0b:cc:61:fa:0b:17:ae:
         a4:59:65:b8:0c:2f:74:c3:f9:95:2c:fe:54:c4:e6:ef:f8:19:
         36:28:43:9d:51:af:e4:70:53:9b:02:d2:ab:7e:9a:11:ab:fd:
         0e:14:0a:cf:2b:a8:c4:70:ab:64:b1:c3:22:af:e0:10:55:4c:
         20:46:24:4b:f1:1d:40:40:33:f7:13:29:37:89:f9:45:06:ca:
         7e:b4:12:cf:1d:50:35:77:62:60:a7:c9:c4:f1:12:b9:57:10:
         7b:94:a8:f2:3e:0b:ce:cd:d0:22:b3:fb:f7:50:5f:73:94:4f:
         78:67:b7:4f:df:ca:27:20:c1:db:1a:8a:34:a5:4e:6d:75:74:
         5a:14:f0:6b:cf:38:82:ca:22:75:5e:36:9b:0a:6e:fe:b0:bc:
         54:b9:15:53:fe:83:96:71:2d:fd:da:32:7d:4a:61:59:40:12:
         d5:16:18:ab:86:8a:99:b8:b4:cb:4e:40:c7:92:7f:2c:7b:6c:
         c4:c7:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:52:13 2025 by rpki-client