Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
File:                     d2015878-4527-3557-82c5-f62f18fd4715.roa (raw, json)
Hash identifier:          LeYE+eM3VHCN0desOKSKnefnF9Ds3gWrjJkJgOIbdWI=
Subject key identifier:   8E:9C:38:A4:F1:8B:98:9C:B0:E5:4A:D6:FB:4D:18:7E:84:07:F9:68
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F432858480EA5167C99E2452B17641E00
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     394927
IP address blocks:        204.155.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:16:7c:99:e2:45:2b:17:64:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=2f1529f6-fee4-4aa6-b776-35de472b24e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:27:03:52:33:f4:b6:eb:81:9a:38:4a:bf:
                    8c:49:05:50:e8:3e:43:46:5a:2a:6a:18:fd:51:ac:
                    64:ca:1b:29:58:da:c5:5c:66:02:b3:db:0a:cc:95:
                    67:07:1e:31:ba:9c:63:55:84:f8:04:83:1d:f5:fc:
                    ff:46:58:45:62:9d:cf:33:6c:87:e6:b8:6a:f0:64:
                    14:c5:e8:04:5f:31:04:46:18:73:dc:a6:c8:95:b5:
                    28:a4:5b:84:9f:6e:86:28:9e:63:c5:0e:7b:9f:8b:
                    93:9f:12:a6:30:d2:eb:dd:01:47:c6:91:c2:e2:ef:
                    6e:e1:c4:ba:dd:98:c5:0b:47:56:9c:e8:25:4e:bb:
                    50:43:90:19:19:15:17:e3:0f:f1:40:43:fa:86:00:
                    e1:55:6c:8c:5e:5d:5a:0f:b1:98:f7:bd:e5:37:28:
                    62:c7:99:bd:e3:e3:71:85:e4:d6:d2:09:21:7d:1d:
                    b9:33:fd:b9:65:7e:29:3f:97:b3:2e:34:f9:2a:68:
                    18:52:bd:ec:cd:6f:1e:fd:91:0f:54:9d:5c:72:dd:
                    20:75:00:8f:58:c3:57:42:91:ee:b5:af:6a:1c:01:
                    f9:7a:22:6c:35:4d:11:11:89:f2:d8:b9:41:1d:d5:
                    e1:a5:c9:e1:d6:44:aa:f1:72:c9:64:78:bc:84:a3:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:38:A4:F1:8B:98:9C:B0:E5:4A:D6:FB:4D:18:7E:84:07:F9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:aa:40:10:23:ec:37:72:cc:a6:87:67:eb:1e:20:2d:0b:
         62:f5:c8:a8:2f:38:fc:29:9f:17:92:22:f7:01:df:d4:70:b7:
         72:2d:2f:90:f5:66:5f:71:be:a4:ca:67:7d:af:c6:4a:83:a9:
         65:5b:d0:fc:6b:27:4e:5b:2e:e6:ba:09:d2:02:eb:dd:73:34:
         1f:62:c8:f9:7a:77:f8:f3:53:8e:46:7c:e9:ae:92:dc:07:39:
         3c:22:4b:74:89:60:72:5b:19:6e:32:47:99:45:b3:ff:ab:73:
         a8:cc:39:19:e0:8c:53:34:31:34:fb:6b:21:7f:c5:bf:89:77:
         32:38:31:05:4e:ad:f8:22:23:9e:89:21:26:70:d4:3e:05:21:
         92:4f:16:16:48:0d:6a:18:1a:d5:2c:0d:5f:94:3e:40:1c:26:
         a2:b2:83:e9:34:e2:97:94:cd:01:88:5b:9d:b3:1c:8b:d1:1d:
         29:16:ce:82:72:2b:52:8c:d8:ed:be:05:f8:37:8d:1c:2e:20:
         12:79:8e:59:74:be:95:b1:53:6c:5a:3b:27:da:47:f9:10:04:
         14:35:85:ac:ac:43:0e:e3:1f:76:c5:77:60:4b:2f:0d:ad:4a:
         13:31:c1:6e:79:b8:a1:0d:02:f2:64:6b:63:01:8f:58:d2:b2:
         72:84:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:27:43 2025 by rpki-client