Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa
File:                     820be15f-1ab0-3e6c-8554-951d99d18e99.roa (raw, json)
Hash identifier:          p6zNuArtE3NlzP+yl84p3flF88LSwa51hYB1Q3b1uI8=
Subject key identifier:   05:FD:36:3F:1A:72:04:79:B6:4E:B1:74:45:7E:3D:D4:41:76:70:43
Certificate issuer:       /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial:       010D0C9F432858483F803AF08A194E44E9BD89C0
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     3555
IP address blocks:        192.31.9.0/24 maxlen: 24
                          198.17.99.0/24 maxlen: 24
                          198.22.152.0/24 maxlen: 24
                          198.137.234.0/23 maxlen: 23
                          199.74.244.0/24 maxlen: 24
                          199.79.216.0/24 maxlen: 24
                          199.89.132.0/23 maxlen: 23
                          199.89.158.0/23 maxlen: 23
                          199.89.160.0/24 maxlen: 24
                          204.89.153.0/24 maxlen: 24
                          204.89.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:3a:f0:8a:19:4e:44:e9:bd:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=b64ada1b-e30a-4886-9ff6-e8265e219a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:d6:e2:66:fe:9f:36:a1:cd:85:98:77:10:
                    ae:ad:fa:d2:d8:17:5e:71:fa:a8:06:d1:09:f3:d8:
                    e4:3e:b4:86:21:a7:76:d5:28:ee:60:a7:8c:69:8e:
                    09:7a:4b:2b:8c:00:a9:4d:36:d5:4d:93:ec:b2:1a:
                    52:80:0b:8f:b2:68:ff:b6:10:20:a9:45:74:05:73:
                    51:80:8b:da:c8:6d:bd:9c:61:dc:77:08:09:ae:d6:
                    db:69:31:7d:6a:80:00:cd:72:8b:b5:82:87:83:e9:
                    e5:ce:c9:47:ee:50:8a:a0:74:0a:17:9c:b3:2c:d4:
                    90:ff:29:cb:57:cd:8b:41:8d:05:65:e5:e4:fc:bc:
                    1b:98:d5:d2:d7:65:8c:f3:54:bf:27:c6:d7:b9:67:
                    d1:f5:82:17:dd:d2:96:ba:81:27:29:55:d3:4e:7e:
                    7f:97:4e:82:62:af:a6:49:94:14:59:e3:1a:d8:4e:
                    40:9c:ed:82:11:bf:87:8c:0e:b9:ae:4c:43:47:aa:
                    7c:7a:2a:80:02:ad:ec:2a:68:9d:b3:a8:83:63:9d:
                    c0:b8:b0:49:98:15:2e:cf:a8:58:c9:52:c3:69:11:
                    d0:2b:06:3d:14:d5:db:4c:9e:55:ae:73:0e:d2:2f:
                    21:50:3a:56:cd:97:95:c9:62:de:05:5a:6c:03:f0:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FD:36:3F:1A:72:04:79:B6:4E:B1:74:45:7E:3D:D4:41:76:70:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl

            X509v3 Authority Key Identifier:
                keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.9.0/24
                  198.17.99.0/24
                  198.22.152.0/24
                  198.137.234.0/23
                  199.74.244.0/24
                  199.79.216.0/24
                  199.89.132.0/23
                  199.89.158.0-199.89.160.255
                  204.89.153.0-204.89.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:39:0a:ba:40:47:cd:dc:a1:16:17:d5:be:c4:79:f2:68:
         e4:13:59:5d:e2:9c:48:e2:66:1e:97:00:e8:10:7c:d7:ac:13:
         af:8e:2b:28:cd:fc:00:76:61:e0:31:c3:f8:55:24:84:3a:4c:
         b9:1f:c8:c8:62:6e:93:47:f1:e8:1d:c0:d1:39:f3:86:f4:10:
         7b:f9:87:ba:d4:fb:ff:7b:4b:19:67:37:80:36:6f:5d:24:00:
         f4:31:3e:4b:0b:e9:d0:fd:5a:9d:f8:86:be:d6:12:a3:53:ba:
         d5:83:fe:23:18:ad:46:88:f4:65:b1:e7:7f:36:33:89:ee:d8:
         61:d9:02:01:92:dd:39:2d:fb:6a:1f:41:4e:78:ce:d3:01:6d:
         cd:d6:b7:9e:50:27:19:f7:c1:eb:bb:25:6b:07:f0:78:3e:8c:
         b2:38:b2:63:0a:39:94:04:ab:e4:f8:50:dc:52:04:15:55:8b:
         81:dd:ba:24:a4:08:c7:7e:2c:55:92:1e:90:3b:99:ff:5c:31:
         7e:88:2f:d0:13:b6:b8:eb:25:91:b9:36:b0:b4:54:ac:c5:d8:
         54:8f:9c:f4:32:6e:d1:c4:e0:f7:df:b2:9e:a9:8b:26:92:e8:
         58:39:04:92:a3:a2:3d:0d:07:3c:68:4a:66:2d:be:21:5a:cd:
         ac:49:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:24:28 2025 by rpki-client