Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
File:                     ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa (raw, json)
Hash identifier:          1TMXTIFgbZ8TnPNyTFmjf8QISgTO+qHCyMA1ZlhebCY=
Subject key identifier:   4C:F8:72:9D:E7:A1:B4:D0:12:B1:4F:3C:E6:43:B7:9B:5E:E7:30:40
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584855D5A19534EA5353C98BF220
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     12430
IP address blocks:        47.61.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:a1:95:34:ea:53:53:c9:8b:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=7322cb45-4773-48bf-ac7b-03314f8fb973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:6e:7e:4d:dd:b9:b9:3a:a7:0b:05:b9:f3:
                    64:bb:93:73:2c:fb:6f:92:41:93:16:2b:0d:58:d4:
                    7f:22:3e:1f:5d:ab:4a:b3:22:35:0c:4a:bb:01:37:
                    19:09:39:d1:05:a7:04:cb:ca:6b:93:35:04:08:7b:
                    9d:4d:6e:47:70:be:00:11:4a:50:e9:73:85:86:84:
                    0f:63:21:1d:4c:f5:cf:1f:21:74:cb:fd:53:97:b3:
                    67:dc:79:45:a9:81:b6:54:10:aa:ce:a1:23:b1:5c:
                    31:6d:d5:67:07:26:b8:37:97:42:b9:ee:59:b1:df:
                    10:43:51:40:15:50:72:3f:e2:43:32:f2:15:9a:8b:
                    88:bd:23:e7:a9:d6:c6:42:bb:af:70:f6:7b:af:bc:
                    45:4b:b7:14:eb:a6:97:14:23:69:97:65:9b:5f:a4:
                    b0:1a:de:30:66:fe:76:90:d3:7e:fa:cc:45:2e:0b:
                    0e:c5:b9:e0:1a:9a:b5:f8:3a:bc:40:59:ae:af:9c:
                    9d:45:17:90:c8:d6:c8:66:2b:52:79:e0:f9:7f:7b:
                    21:26:e7:c8:74:27:10:d0:09:bc:7f:1d:d3:8b:fb:
                    a3:d5:ea:aa:50:ad:13:fd:b6:3a:f9:06:83:2a:6d:
                    70:5f:9b:ce:98:dd:5e:81:83:8d:af:c1:db:b6:53:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F8:72:9D:E7:A1:B4:D0:12:B1:4F:3C:E6:43:B7:9B:5E:E7:30:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:cd:10:8f:fc:1f:4e:30:cd:dd:5e:e2:71:32:36:47:be:
         be:72:b4:ca:37:33:d0:0d:c4:26:d5:f1:26:8e:6e:7c:f8:d5:
         26:fb:28:3d:aa:72:1c:33:8a:fc:1f:77:d7:07:01:ae:29:69:
         05:31:7e:4c:c3:32:44:cf:47:01:d9:82:05:69:02:ed:49:fb:
         83:72:de:7b:b3:29:a4:ee:b0:21:15:f0:b9:9c:bb:b0:ef:8f:
         b4:89:fc:9a:59:d3:7f:1c:34:ef:c4:d2:c5:0d:dd:e4:8d:92:
         46:1e:ad:d8:84:4c:f2:ee:b4:15:73:1f:bd:aa:66:3a:06:90:
         44:54:5b:4a:1b:47:7d:86:63:28:1c:fb:e1:51:06:1b:72:da:
         4d:59:73:42:91:c4:7d:b4:ff:4f:2c:32:6c:a7:cb:81:c7:09:
         01:4e:a0:47:68:51:a1:f2:bd:85:36:be:92:bb:b9:18:0b:2c:
         14:9c:a8:8a:15:c7:e0:6b:2f:5d:da:02:18:e7:20:a4:6f:b9:
         4b:89:7b:2e:15:38:24:31:17:5c:2a:f6:fb:05:dd:a9:47:68:
         5b:24:07:fe:2d:6c:5a:6d:c0:ad:03:af:9b:c8:c7:58:6c:02:
         93:22:46:d9:3c:94:2b:21:2f:13:8c:2b:48:34:e5:aa:79:c9:
         4c:2f:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:50:48 2025 by rpki-client