Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
File:                     ca174187-a544-3df0-8b36-2922d0060aea.roa (raw, json)
Hash identifier:          91Chlg4kznKOhk6IRniPgvelW+5DJ/9U1pwkF+sWTKY=
Subject key identifier:   00:12:E9:36:A1:DB:F0:49:FA:C3:56:22:FE:6A:70:45:D7:15:9B:C1
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584832F02695130081699A2B4130
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     0
IP address blocks:        131.153.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:26:95:13:00:81:69:9a:2b:41:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=41aaae1e-1c5f-4a24-ba61-9718dbaa07b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:5a:c7:5b:f0:82:84:8c:a8:04:6f:90:b1:
                    e8:17:95:fb:b2:4c:9d:7b:0d:ec:4f:cc:02:bd:62:
                    65:47:91:75:f8:a8:6f:6f:bf:df:a8:c7:3c:ae:96:
                    cc:71:39:b0:48:3f:9c:0d:6f:8e:20:b3:0b:d2:a3:
                    e4:ad:ce:32:42:81:da:25:93:c6:8c:7f:ae:ad:db:
                    6f:eb:79:1b:0d:74:45:1c:c8:27:ec:88:98:90:4b:
                    d2:84:6e:01:a2:fe:36:01:45:8a:e0:bf:06:00:3f:
                    fa:c9:f2:92:fb:bb:39:91:9b:3e:79:2f:42:ef:60:
                    31:bf:66:1d:7c:7f:40:1d:e3:20:6f:40:e7:f5:07:
                    bb:8f:0b:a6:04:f6:cc:a2:74:87:8e:de:b6:2c:70:
                    76:c9:42:1f:32:9b:f6:f1:53:a9:48:4b:3e:3d:d6:
                    81:d2:06:8b:6b:3f:ad:f6:c0:8a:f9:48:c5:44:fc:
                    f1:9e:0f:8f:25:e9:58:57:2a:12:98:f8:da:1d:10:
                    15:53:dd:35:05:78:67:42:12:9b:0f:1e:e0:eb:77:
                    c7:18:2f:dd:d4:73:2c:c0:9d:cc:72:64:6b:0f:c0:
                    e2:50:6b:9e:26:7c:c2:8c:d2:62:12:8d:61:64:f5:
                    71:8f:d3:f3:e8:58:45:23:ac:8c:8f:bc:24:a8:41:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:E9:36:A1:DB:F0:49:FA:C3:56:22:FE:6A:70:45:D7:15:9B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:07:68:94:af:fc:66:bd:ec:cb:8c:d8:e8:a4:37:18:fe:
         34:10:b5:05:ce:1a:be:89:ef:25:a4:63:44:ac:33:4d:ad:4b:
         0f:eb:9a:d9:ed:53:04:9a:08:af:b9:68:90:6f:6f:38:5d:fd:
         66:d6:18:f1:f7:fe:e0:df:e7:f6:87:d6:4a:ae:e4:1f:44:07:
         b3:c7:96:08:d6:a7:bc:ab:a5:d2:49:1d:00:02:a8:b1:88:53:
         a3:ba:0b:44:9c:62:e6:90:9e:f8:10:76:1b:ac:46:8b:0b:30:
         a1:df:af:76:fc:4b:f1:1b:c2:c2:81:97:43:0d:2b:ca:d8:a1:
         5a:a1:a3:0a:46:70:88:4f:43:10:56:41:1d:29:b9:d6:c6:7d:
         5b:21:dd:ae:67:1b:37:85:1f:95:67:22:66:1a:aa:f6:ca:24:
         bf:16:45:7c:36:b8:15:ea:11:60:ae:2e:49:8b:39:68:43:dd:
         a7:63:39:a2:e9:21:99:f2:2f:82:1c:63:f4:d9:e2:8a:a1:89:
         11:70:65:02:0a:65:d7:44:28:82:fd:09:32:3b:6c:62:17:a0:
         3e:60:2b:11:56:75:35:77:1e:48:2f:6c:8b:fc:04:35:7a:69:
         20:2d:5b:e5:d6:5b:0c:2e:44:fd:6b:7d:94:94:b9:0c:a0:79:
         02:02:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:10 2025 by rpki-client