Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8b3eeb50-7d6b-3190-9b66-8f087656450f.roa
File:                     8b3eeb50-7d6b-3190-9b66-8f087656450f.roa (raw, json)
Hash identifier:          khid8Vo5aDJE1kAmbYfgMIeEm42lhS+gC4sCKSp3Jkk=
Subject key identifier:   24:6D:A6:04:94:33:C5:C4:87:85:7C:CB:B1:4D:CC:A1:4D:0C:B3:C5
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EBFFE33AE49E00D98EF42A0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8b3eeb50-7d6b-3190-9b66-8f087656450f.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     20454
IP address blocks:        184.95.32.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fe:33:ae:49:e0:0d:98:ef:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=f3f0704d-8294-431a-bfcf-1573b8b517d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:f5:70:9d:86:57:7d:f9:48:27:a8:26:d7:
                    d1:6b:b9:9a:44:b9:5e:80:97:45:e9:ca:77:cc:6a:
                    4d:c3:5f:ba:1d:5d:c5:d3:2f:fb:e3:13:83:25:8b:
                    cc:a3:c5:08:c9:7d:2a:32:c9:e7:22:f1:9b:c5:f7:
                    12:99:ed:f6:bc:8f:d4:6a:f6:e1:80:c0:9b:f3:a9:
                    72:44:df:f0:7b:8e:ef:14:c3:a0:6d:43:ef:6b:77:
                    2c:46:cf:79:60:d3:d1:22:de:93:f3:b7:83:3c:90:
                    fd:74:f6:79:89:16:e7:1b:d1:9f:43:2f:17:0d:26:
                    14:c6:ec:30:7d:03:1f:c5:e0:c1:dc:fc:2d:29:c6:
                    48:5b:9a:f1:19:c2:28:39:05:86:e5:7c:17:14:6c:
                    f6:c1:91:ca:7d:9c:e3:09:c3:96:3d:ba:58:d8:9f:
                    7e:d6:25:37:21:51:9d:75:ca:9c:6a:99:ec:48:17:
                    c6:de:80:b1:7f:14:74:20:7a:98:4f:56:40:7b:38:
                    f7:13:73:fe:0e:b4:72:20:e5:0d:27:58:20:c0:bc:
                    a0:5f:0c:a6:ca:71:8d:13:6e:fc:4d:26:97:52:08:
                    8e:db:87:d8:db:b9:76:c6:12:22:1a:c6:f0:d9:b1:
                    3a:92:16:18:a3:f1:a6:81:f7:25:61:f6:e4:38:62:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6D:A6:04:94:33:C5:C4:87:85:7C:CB:B1:4D:CC:A1:4D:0C:B3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8b3eeb50-7d6b-3190-9b66-8f087656450f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:53:12:d5:4a:21:70:92:4e:89:26:64:2e:18:a6:2f:71:
         2b:e2:5a:bd:a0:cf:38:01:86:e1:1c:d2:7d:59:c8:b5:c0:c0:
         b1:aa:d7:e7:52:33:2a:67:7a:a6:79:96:3d:7d:31:5a:5f:fb:
         f1:e9:35:4a:e2:7a:9f:cd:e0:fe:68:5f:50:b9:db:08:32:6d:
         75:56:18:1c:e4:2e:50:45:7e:74:4e:14:cd:59:3d:e7:f9:18:
         cf:9f:db:34:c0:82:a6:3b:3b:30:b7:55:38:80:e0:8f:51:cb:
         8b:06:30:ac:87:2e:0c:bf:fc:72:53:c7:04:ef:6e:fa:b8:d9:
         a3:a7:37:e0:68:1e:72:aa:8d:ed:5f:a2:42:e1:db:cd:cc:7d:
         8b:49:28:ec:51:a3:4a:77:39:b7:0a:29:47:3d:ad:0a:3d:64:
         07:64:85:71:ba:b6:3a:64:8b:fd:c3:de:46:03:c9:33:4f:fc:
         36:28:24:8c:ad:04:86:17:b4:f2:d6:8d:a9:93:a4:ac:a2:08:
         7e:5c:d4:09:8f:a1:80:42:a0:03:e1:17:29:12:d6:94:0d:7c:
         e4:0f:a4:87:b3:2b:d7:6b:61:a1:85:17:dd:ba:68:96:e6:bf:
         07:05:0a:18:d9:88:ed:59:f8:ef:87:c4:48:d7:11:bd:0f:c8:
         f1:bc:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:46 2025 by rpki-client