Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
File:                     f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json)
Hash identifier:          1V5DLW0/uFfwTLHYvvCaNY3Go3mUgHH7hW/vEhX1e7w=
Subject key identifier:   68:C2:23:5A:E9:BD:2A:82:B5:30:09:34:B1:8D:B6:67:99:48:D9:D7
Certificate issuer:       /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
Certificate serial:       010D0C9F43285848159FE06DD581656E5EFF8120
Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     399218
IP address blocks:        172.81.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e0:6d:d5:81:65:6e:5e:ff:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=30b80438-44e8-4b2b-9415-39bd64004a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:11:04:56:e4:38:39:33:f2:db:f8:40:96:
                    f9:2f:5d:b9:4f:ca:a8:a8:38:55:35:f6:a0:93:7b:
                    2a:27:f6:8c:7e:2f:5e:24:0d:db:a8:d0:bc:53:91:
                    6e:06:92:86:b0:37:22:8e:58:c5:5f:85:d2:3e:6d:
                    e7:8e:82:cc:1a:0e:ca:6b:37:f1:90:fa:27:49:c7:
                    9e:20:be:99:16:e6:2a:d8:38:26:93:99:02:a0:54:
                    70:9d:af:76:8a:87:7d:6f:6a:e7:79:f0:67:e7:2b:
                    65:51:9a:99:c6:0e:a2:a1:bd:94:87:dc:99:f3:47:
                    51:76:ff:9f:fe:f8:94:5f:e8:d4:c2:e7:fe:c8:b9:
                    c5:39:d9:39:32:92:7c:01:c1:ec:e9:db:2b:a9:fc:
                    b9:8e:f2:98:e0:67:4a:63:36:fa:50:38:e4:45:78:
                    93:15:ac:e3:c6:f5:15:88:9d:47:2d:aa:21:d5:7e:
                    97:ba:ea:31:34:6e:18:79:b3:6b:f7:16:d9:26:c1:
                    5d:7d:47:af:8e:2a:0c:68:12:4a:e1:b4:18:54:71:
                    3f:4d:a3:10:c6:b3:07:5c:8a:25:e3:8e:ac:7b:04:
                    6c:88:71:61:82:97:ce:6e:c0:8b:81:d1:9d:94:59:
                    ba:ef:b5:74:3b:b9:e1:05:77:1b:de:c4:25:2c:67:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:23:5A:E9:BD:2A:82:B5:30:09:34:B1:8D:B6:67:99:48:D9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl

            X509v3 Authority Key Identifier:
                keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:2a:24:46:26:26:74:0b:42:f5:2d:06:c2:1d:d1:84:4a:
         62:42:66:54:ab:3a:95:0c:ca:6b:7e:af:82:21:28:cb:20:16:
         b8:b6:52:d7:6d:79:25:f5:29:9f:5c:1c:30:ff:54:7a:be:de:
         4b:99:e5:ad:b8:33:0d:c1:4d:13:6f:16:5f:bf:71:6b:a4:c3:
         a8:1c:b7:76:70:19:ec:17:99:be:a7:8d:92:23:90:3c:90:05:
         83:ff:c4:3a:13:d6:13:b4:8b:17:83:0b:7e:0c:14:82:3b:d9:
         32:a4:6c:9f:00:79:5a:1d:cb:e0:d7:96:15:49:a7:da:c5:60:
         5f:8f:ea:46:12:7f:e5:fc:49:47:60:7e:3c:14:09:0e:22:14:
         f4:a1:1e:9f:aa:a4:b4:53:8b:15:67:59:42:a6:ba:af:6f:00:
         1b:ad:5e:e8:86:60:57:b5:28:c0:fd:dc:a7:c1:14:e9:60:b3:
         1d:84:35:69:06:bf:09:41:62:9c:8c:93:4d:a0:f8:f4:73:09:
         bf:c4:1a:46:dd:39:46:5b:77:4d:4f:6c:ff:71:bf:2a:0b:af:
         7b:a9:03:f0:9f:78:c7:c5:bf:63:7a:68:db:4f:32:88:87:30:
         9c:76:fc:87:50:12:3c:ba:42:0c:99:a0:36:2e:30:ce:85:03:
         d9:cb:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:38:46 2025 by rpki-client