Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
File:                     c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json)
Hash identifier:          62Q8I0fcFefLypshTitTk91FDeLLA0cXVUDRLr3L+ks=
Subject key identifier:   87:A1:C3:E1:F7:14:FD:A1:42:0B:8D:29:D2:77:C3:09:0E:B9:02:57
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584819665F3D777D8272C85C2740
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
Signing time:             Wed 04 Dec 2024 22:28:22 +0000
ROA not before:           Wed 04 Dec 2024 22:28:22 +0000
ROA not after:            Tue 04 Mar 2025 22:28:22 +0000
asID:                     23280
IP address blocks:        143.223.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:66:5f:3d:77:7d:82:72:c8:5c:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Dec  4 22:28:22 2024 GMT
            Not After : Mar  4 22:28:22 2025 GMT
        Subject: CN=b79c60a7-4899-4510-ad78-9facbc118d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:e7:f1:f6:1c:d2:ec:29:55:1f:a5:89:36:
                    2b:b5:c8:d0:44:c4:af:9d:8d:00:81:c4:c4:40:07:
                    16:20:14:09:10:b4:44:52:fa:43:18:06:71:39:e9:
                    af:f5:11:bc:eb:b9:ae:6a:48:83:2a:93:52:12:79:
                    c9:c1:8a:d7:17:b7:27:32:fc:4b:e1:cc:64:90:35:
                    e6:78:69:af:7d:1e:37:3b:02:61:87:18:c8:f8:2c:
                    09:b0:f9:a7:a9:27:80:68:8d:74:83:57:09:cd:93:
                    fb:84:bc:30:4a:b8:6e:00:a7:9e:41:e0:98:e9:36:
                    fa:c8:93:3d:1f:13:90:9b:07:c2:52:da:e5:af:8a:
                    83:52:6c:53:21:49:40:f8:74:69:e9:34:1f:85:a7:
                    88:30:91:6f:4d:43:83:b0:6c:81:df:49:6a:6b:bb:
                    73:3e:cc:50:31:83:18:36:e2:81:99:5a:10:ab:d1:
                    2a:e5:dd:6e:65:db:ef:37:c9:6e:46:26:41:78:1f:
                    ad:76:29:05:7d:8c:68:53:21:f8:fb:8f:bd:45:40:
                    6a:a3:4c:41:93:26:89:11:5f:6a:ff:34:58:73:02:
                    fc:bb:fc:3c:01:54:b4:af:fd:1c:64:95:2a:62:63:
                    66:d7:55:bc:67:8e:f2:fd:bb:a4:f2:c3:64:6e:f7:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:C3:E1:F7:14:FD:A1:42:0B:8D:29:D2:77:C3:09:0E:B9:02:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:59:93:d2:6e:8c:b4:2e:32:96:9f:f1:24:e6:a7:a9:d0:
         92:f5:e9:60:f4:68:60:16:5b:09:f4:4e:3a:91:a7:84:fb:93:
         9e:c1:b9:14:bd:a8:5f:22:88:cf:13:ce:28:f1:31:a0:8b:2a:
         b9:b5:3d:fd:9d:1a:90:54:b0:1d:24:69:f1:56:9c:7a:3b:7c:
         71:77:ea:62:9b:d9:56:6b:e1:65:cb:33:53:90:1c:df:c1:8c:
         8f:1a:d2:71:e2:a5:95:58:48:2f:bc:b2:16:95:17:98:49:97:
         5a:bf:07:25:77:10:34:da:08:ae:3c:86:d1:ea:45:83:ab:ba:
         d9:00:1a:75:73:85:ee:09:c5:bf:ff:6d:f4:38:27:e2:a9:09:
         6e:ff:3f:26:0b:85:2d:87:ae:0f:9d:3c:0a:37:76:62:5b:13:
         5c:ab:ea:ac:d9:44:31:d0:a4:8d:ea:82:b6:a7:03:b0:94:f2:
         e2:c1:6c:ed:b8:06:27:96:1f:e4:63:e2:3a:f1:3a:48:f4:84:
         e3:33:e0:e8:82:61:f8:bb:41:b9:00:24:20:46:46:80:e3:f6:
         ec:75:f2:5e:4d:bb:f5:9a:ed:f1:55:c9:25:db:b1:f9:75:c1:
         bb:76:10:7b:ec:cf:26:4e:e0:fc:54:fb:25:98:ed:26:9b:2d:
         bf:60:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:05:41 2025 by rpki-client