Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
File:                     bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa (raw, json)
Hash identifier:          VeuBkbIQ4Bb6ZFEeys/zGWdn9TEHY7Cz8uUXeZLJXPk=
Subject key identifier:   82:C1:EB:18:30:F3:C9:F1:56:C0:8E:0B:2B:51:AD:C7:B0:A0:B8:20
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8ACA85FA97E498FC5B80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     136899
IP address blocks:        131.153.92.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8a:ca:85:fa:97:e4:98:fc:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=4435de7f-b1a9-401a-9270-c206fbda6ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:7a:e5:b7:60:22:9f:c6:2f:5d:de:2a:cc:
                    20:87:a4:7c:c5:71:97:69:27:b8:51:59:75:48:20:
                    5a:61:ce:29:14:5e:ae:09:bb:5e:b0:13:61:ac:54:
                    ab:b0:bb:2b:37:c2:63:d5:20:fa:4c:3a:24:f5:e2:
                    a7:95:02:af:43:60:e2:cd:9a:bb:3f:d7:ba:53:89:
                    d9:46:38:50:7d:ce:7f:54:80:9a:fd:bc:87:11:22:
                    58:db:66:ce:5b:74:d3:7b:30:5f:0c:2e:04:84:c4:
                    e9:bc:3e:a1:90:50:1c:38:1a:f4:7f:59:34:49:39:
                    17:64:a9:43:dc:5e:ad:a3:74:74:8d:3c:3b:00:6c:
                    cd:f3:31:c7:9b:99:5d:f5:42:0e:ee:56:0c:f4:f2:
                    7b:61:4f:69:c5:6d:e8:2b:f7:bd:d4:7b:1f:77:d0:
                    54:9d:ef:fe:59:d1:5d:76:a1:42:ba:a8:7f:34:4c:
                    87:8f:e2:e8:83:40:a1:b9:72:ad:55:bc:c0:5f:1a:
                    56:d0:25:bb:3d:74:79:a4:17:b8:04:e9:e0:05:11:
                    8f:e4:fa:ff:d8:72:5a:bf:63:44:bd:67:99:e4:3f:
                    27:ef:e4:5d:af:a8:43:df:40:7c:7f:1c:52:66:47:
                    df:54:76:71:8a:0a:2a:56:a5:35:b1:bd:58:8a:d1:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:EB:18:30:F3:C9:F1:56:C0:8E:0B:2B:51:AD:C7:B0:A0:B8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:aa:ff:a8:cd:ff:fe:85:09:32:c2:dd:45:af:85:89:8a:
         fb:95:c4:fa:86:01:b6:18:ac:4f:ee:38:56:60:de:57:b6:f5:
         e3:d9:a2:76:af:a3:a4:1f:a1:a1:27:11:3d:40:0d:64:61:dd:
         36:d3:79:54:83:fb:24:d7:37:10:40:2e:97:3d:ef:50:e8:d2:
         e5:f2:ba:59:8d:39:8e:7a:7e:10:ba:42:ef:2d:72:0c:9d:c3:
         24:8b:51:d6:c6:8c:d5:05:73:48:65:86:2d:f0:bb:e4:2f:1e:
         8c:5f:74:33:d8:bd:40:94:d9:c2:13:ee:a2:f5:10:25:75:2e:
         50:33:0f:9c:fd:45:50:fd:cc:4c:33:f3:50:5f:28:58:f8:0a:
         df:7c:ca:cf:84:c7:09:3c:42:31:b6:f9:c2:d7:26:93:2c:eb:
         f6:f3:ed:30:83:4b:ff:3b:db:19:ba:88:b2:cf:64:5f:22:3b:
         62:f1:ce:3d:5d:51:55:c9:be:c1:c6:ae:47:c6:07:8b:ad:cf:
         12:c3:12:d1:bf:26:ee:d3:ab:0a:4e:03:3c:33:6a:a7:b1:09:
         05:00:da:c9:44:d5:07:bb:5b:96:37:b6:1e:5f:86:73:17:be:
         b6:63:54:c5:0b:4b:67:65:d2:1d:b0:d5:a3:6f:75:a5:fb:22:
         a9:33:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:17 2025 by rpki-client