Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
File:                     2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa (raw, json)
Hash identifier:          9pz4fek1OTUh54NRQGTLNSl99kMqkQKFPQ6iMxgunz4=
Subject key identifier:   FF:82:20:1F:E3:95:11:F7:2F:3A:53:A8:2D:BF:17:0C:2F:D2:69:27
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858480BDA7954DDDE10F7DB974100
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     20454
IP address blocks:        131.153.231.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:79:54:dd:de:10:f7:db:97:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=795fba9b-8b94-425f-b384-aa7fc8d26516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:6b:42:47:c7:a6:ef:06:0b:c1:e2:a6:dd:
                    5a:27:53:c6:e7:d6:40:07:d8:ef:43:9e:c8:f3:1e:
                    e1:1c:f6:a8:0a:4a:94:06:42:d4:25:40:3e:70:12:
                    db:a2:86:68:74:50:c4:23:4e:c9:1b:ad:34:5b:a1:
                    2c:e7:b9:e3:b5:06:29:b5:ff:7c:49:6d:b0:02:59:
                    4b:bd:80:43:93:88:5f:3a:08:fd:37:07:ca:80:70:
                    5d:a5:e3:30:a3:21:c5:3f:2f:55:fa:0d:84:01:40:
                    5e:7b:9c:04:98:29:19:41:f4:db:fa:77:93:95:b4:
                    0e:66:7a:fb:9b:58:2a:c0:22:ce:ef:31:dd:7f:3e:
                    08:29:cb:1d:9e:30:f7:80:88:e4:a9:b3:a9:c5:52:
                    a3:55:8d:7b:81:9c:30:e7:ed:86:25:a7:05:b6:db:
                    f7:9d:fd:16:d9:27:e9:5e:f0:22:1b:be:55:18:08:
                    3a:79:35:13:51:8e:b4:de:0e:04:94:4e:34:bc:ac:
                    58:83:af:95:b3:84:a2:8f:a0:a4:df:c9:13:76:76:
                    50:35:ec:29:dd:e3:23:73:d1:73:1f:5a:2b:33:be:
                    21:b1:d2:1d:9e:20:c0:f3:ae:18:a2:19:3f:89:e7:
                    6b:da:21:c2:c9:bb:ff:e5:a2:78:f3:1a:4c:74:84:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:82:20:1F:E3:95:11:F7:2F:3A:53:A8:2D:BF:17:0C:2F:D2:69:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:64:5e:be:7e:45:36:01:aa:b1:98:28:da:ae:59:49:8c:cd:
         45:09:f7:81:e0:43:10:6f:23:a6:cf:75:d3:d8:80:1a:da:f2:
         01:8f:00:6a:7b:7b:21:6a:5a:2f:c3:bf:fb:df:db:6b:10:3b:
         31:26:e8:7e:2b:34:4d:12:41:66:16:28:3c:80:87:84:bb:5b:
         43:d0:6a:60:4c:3f:39:a6:be:89:05:cc:fd:45:c0:5c:17:b6:
         76:f9:24:a7:64:75:b2:79:ff:f9:07:77:96:e3:03:44:09:3e:
         02:10:e9:22:43:57:25:d8:54:d5:6f:58:36:27:81:55:ad:84:
         7e:89:1d:f7:7e:bc:33:ca:b7:0e:88:e8:ba:44:a5:d7:c3:c6:
         66:0f:bc:77:c5:50:85:7e:25:fe:8c:07:a5:84:84:cd:a5:58:
         75:c9:c6:e6:bf:73:88:fe:5e:1f:db:a2:8a:b2:6b:9d:f5:10:
         b1:7e:0d:46:84:e1:7b:6b:9c:e7:93:e7:c5:90:eb:6c:49:36:
         d4:2a:4d:c0:47:7d:06:da:8b:30:45:b5:18:d9:50:96:2c:38:
         0f:f1:96:3d:0b:c4:9a:71:b4:c2:a0:ed:c9:23:92:97:04:5a:
         49:79:42:79:64:99:be:db:69:1c:33:ee:3d:2e:85:28:5c:fe:
         6b:4b:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:40:42 2025 by rpki-client