Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
File:                     7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa (raw, json)
Hash identifier:          xbyP45E4XGYLB6uXZ2EeFvEuVqD1Pd1SnSvKSONIkhE=
Subject key identifier:   F7:27:2F:6E:EC:DD:C4:BC:72:BB:BA:66:7D:F4:58:88:98:EE:5B:54
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584819CFC805A72EBDC0E08580C0
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     25945
IP address blocks:        162.253.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c8:05:a7:2e:bd:c0:e0:85:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=f6f1c777-2f49-4362-ab5a-79d21a74941d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:b2:f8:c6:da:7d:16:8d:73:60:5b:5b:b1:
                    90:c2:4c:de:af:3d:23:a5:6d:25:39:34:c9:0f:df:
                    1f:30:16:c2:7e:de:c6:e2:32:b9:44:50:a0:1d:37:
                    12:dc:f1:4f:1b:06:92:a5:8a:90:e6:7a:51:34:b6:
                    26:f6:c3:43:59:a1:ed:06:03:05:55:72:a1:f2:b6:
                    10:d0:e3:98:1e:ff:b4:0e:18:b3:19:a1:ac:3d:f0:
                    76:59:bc:68:67:06:b9:24:aa:77:1a:0a:a7:5c:0c:
                    89:c9:f3:2f:55:73:65:4b:5b:a1:9b:98:eb:b4:58:
                    37:29:6a:05:28:1e:2d:b4:db:b0:f5:03:1f:eb:07:
                    f6:77:63:9c:57:7d:29:5e:c3:00:03:0f:63:95:5d:
                    57:c4:3f:85:5d:df:0b:6b:1b:66:0c:59:9e:c8:24:
                    4e:fc:61:61:99:fd:90:0d:33:0c:62:5a:3f:47:32:
                    12:be:d9:a7:f3:a8:77:4e:4a:cb:02:11:5c:06:ba:
                    ae:d0:0c:a9:f3:98:83:4a:bc:a6:3a:3d:80:5b:66:
                    4e:5c:cf:0f:48:9f:73:ea:bf:1e:39:fa:15:99:56:
                    8c:3e:67:e0:8e:bd:a6:f4:05:a8:f6:6b:25:b6:c5:
                    23:cc:7e:a8:7a:85:69:22:f8:eb:70:2c:da:5e:fb:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:2F:6E:EC:DD:C4:BC:72:BB:BA:66:7D:F4:58:88:98:EE:5B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:3e:63:f7:20:6d:1a:52:03:43:3c:19:80:41:fe:b5:71:
         01:6f:df:51:51:85:8a:5c:ea:4a:da:f9:ec:80:22:88:ec:90:
         04:16:84:9c:2a:ce:cc:eb:df:02:69:1f:ff:f8:b7:51:23:a2:
         61:92:2d:a7:00:18:ee:33:ac:ea:16:5a:5f:00:a8:44:55:7c:
         88:b7:7b:3b:72:51:66:3c:e0:1b:60:70:a9:73:d5:c7:5e:50:
         61:9e:31:f5:1a:af:6b:03:0c:f2:2d:49:0c:cc:a6:fc:fb:29:
         da:89:bd:65:86:a2:f7:ca:22:7a:1a:92:48:24:3a:14:53:16:
         e1:3a:9f:a7:46:48:5d:11:a8:d2:63:90:31:53:9d:cc:e6:28:
         ca:ba:12:73:ad:43:d0:c2:0a:8e:83:c4:a4:67:c6:6e:bd:76:
         af:11:11:8f:65:d6:6d:8c:40:60:4d:97:d0:52:2a:b6:0b:22:
         64:a4:2e:0e:6b:55:83:82:8b:7f:30:1f:46:7a:78:56:fa:d5:
         3a:cc:33:9e:b5:a2:2a:c8:a6:97:a5:b0:ce:ab:a9:4b:28:5b:
         33:53:d8:9d:52:7b:57:65:ff:8a:1c:2b:e4:07:1d:f8:0a:9b:
         96:c1:17:2b:32:53:b6:b5:01:43:3c:c3:19:f4:56:02:c6:34:
         3b:0e:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:54 2025 by rpki-client