Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa
File:                     a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa (raw, json)
Hash identifier:          QLNQs3CZtD9cn3CuFUrmAXQ6ckwnNzTd3BiE8moP7p0=
Subject key identifier:   DB:9B:FC:4C:63:0A:09:78:69:54:D2:A6:1C:70:13:1E:32:0E:B5:48
Certificate issuer:       /CN=90084646-f74e-42c1-9557-3764d36b8bb6
Certificate serial:       010D0C9F4328584824FA8346779711A8317D3B80
Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     396238
IP address blocks:        172.82.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:83:46:77:97:11:a8:31:7d:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=3cd47926-553a-4251-8ba0-c77fb252ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:0f:d8:12:79:c5:db:f4:a1:1a:b0:ef:a1:
                    c0:b1:30:42:68:5e:8d:af:e6:77:50:e1:00:51:a2:
                    bc:5e:a5:47:a6:d6:50:53:32:5b:97:e8:84:2d:8d:
                    c7:ca:d9:f2:6c:0d:5c:f9:f1:b7:71:e1:e1:22:6b:
                    96:33:67:9d:7b:55:f6:fa:50:a6:9e:82:ea:62:ea:
                    4e:07:a9:c9:52:07:b4:ae:a6:e9:6c:b1:fa:2d:4b:
                    92:e0:02:84:9f:b5:66:58:3d:54:a4:3d:5c:a4:67:
                    26:62:13:9c:bc:6d:40:7d:e5:22:4a:36:23:36:0e:
                    6e:bf:d4:fa:f5:2c:b0:59:74:16:0d:09:6f:f0:4c:
                    dd:08:0d:77:c0:37:e6:5b:4b:1d:54:01:ae:d4:0d:
                    56:b8:db:95:72:95:19:10:08:3d:5b:4a:09:5d:7c:
                    38:d4:46:b2:a0:92:f4:f7:d3:c7:7a:20:7a:c1:8c:
                    aa:eb:c7:4e:61:e0:e9:cc:68:d8:ca:5f:4b:b1:cc:
                    54:1a:4f:a6:fe:00:4b:a4:e9:1d:c1:f9:e7:87:39:
                    e4:13:d7:0d:95:fa:da:56:5f:ac:3b:ae:78:11:dc:
                    29:8d:4e:9d:01:83:ec:f5:d0:6d:c7:8c:42:15:ea:
                    b5:28:f2:63:6d:c5:33:76:80:e9:ec:0d:81:4f:ef:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:FC:4C:63:0A:09:78:69:54:D2:A6:1C:70:13:1E:32:0E:B5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl

            X509v3 Authority Key Identifier:
                keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:dc:e9:aa:e6:60:23:59:24:d3:65:25:fd:35:1a:22:e7:
         35:f5:e8:1a:28:d0:36:90:57:7d:19:ba:2d:54:cf:bd:07:5c:
         6e:2b:3d:74:5b:49:72:a5:b6:b1:28:42:23:28:6c:a7:9b:14:
         8d:73:ef:c9:96:90:e9:9d:87:0f:34:e1:16:86:8e:4a:42:c0:
         48:a0:d3:cf:05:e9:3d:a3:c1:91:83:d5:18:f6:91:e7:f7:f0:
         79:01:f8:69:e5:9c:a2:7c:41:7c:ba:ec:32:80:7c:e2:77:e9:
         4c:5f:9e:36:3b:fb:94:49:b9:05:10:81:ec:05:18:17:a7:1c:
         e5:45:32:43:49:7e:49:87:9b:da:a0:89:c1:61:a2:97:c9:c5:
         29:de:8a:31:7b:9b:a2:9e:8b:e8:f9:af:2a:18:d8:95:a4:28:
         d5:b2:c5:39:53:68:ee:11:d8:2d:07:bc:70:e0:6e:74:99:b7:
         04:6e:1f:11:e9:5b:8b:b5:16:5a:e0:ec:94:d6:f0:2a:86:7e:
         ea:dc:bd:23:33:8b:f9:b1:4e:95:ea:d4:4a:82:d8:aa:d4:51:
         cf:38:86:b7:e1:22:12:21:a5:0e:b2:9b:33:2c:cf:2d:5e:c5:
         26:99:c0:6e:0c:61:0c:34:37:c2:2d:34:60:12:2d:03:47:6e:
         5e:90:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:05:47 2025 by rpki-client