Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa
File:                     8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json)
Hash identifier:          bX4XgxKhM3tPPxhKN3DRUyQWLEs6jScgSzr2vWhaVNU=
Subject key identifier:   86:D8:B0:92:20:F2:22:17:9C:C5:FA:7F:95:69:A0:E6:6A:D2:C7:E8
Certificate issuer:       /CN=5e2da88f-6029-42b9-b598-2623343a3150
Certificate serial:       010D0C9F43285847FDE4D42FA9DDD26991002500
Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     68
IP address blocks:        128.165.0.0/16 maxlen: 16
                          130.55.0.0/16 maxlen: 16
                          138.98.0.0/16 maxlen: 16
                          141.111.0.0/16 maxlen: 16
                          192.12.184.0/24 maxlen: 24
                          192.12.208.0/24 maxlen: 24
                          192.52.70.0/24 maxlen: 24
                          192.65.95.0/24 maxlen: 24
                          204.121.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d4:2f:a9:dd:d2:69:91:00:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=fc9adb9a-f650-4a20-8ede-e17e1d85522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:73:96:bf:b4:55:8a:8c:b7:17:a6:b1:e2:
                    2f:7f:19:d8:fe:08:1f:f3:d8:70:49:9d:db:52:39:
                    1c:a7:85:85:5f:aa:89:e7:e9:cc:f2:66:94:68:78:
                    6e:99:a2:2b:0a:43:18:70:fe:d7:01:0e:20:0a:e8:
                    6e:7b:d9:81:5d:c5:86:39:d3:8c:ab:b2:39:24:03:
                    52:c1:9a:52:b4:28:25:9b:17:cd:55:24:5d:83:9d:
                    19:c5:e5:fc:fc:a5:c7:9f:3c:22:50:c3:74:c1:c7:
                    29:43:51:3f:0e:d7:60:3e:46:57:11:7c:32:47:c3:
                    b3:93:d8:fb:6d:89:18:98:8b:d7:9c:c6:c6:61:d5:
                    dd:65:f7:13:0a:ce:69:2d:89:6c:80:a3:99:18:0c:
                    15:1d:6c:9f:34:82:de:ad:15:0a:74:9b:93:c5:31:
                    ae:c2:26:64:e4:4f:37:b6:d8:d4:5a:ce:dc:58:cb:
                    06:07:e8:fd:e3:d9:87:70:43:78:5f:83:05:4e:54:
                    d4:52:2b:0e:19:71:f8:34:ca:17:e1:89:8b:af:89:
                    91:d4:cb:f1:e2:fe:5a:dd:72:f6:31:23:20:37:c0:
                    b8:6b:c6:63:13:bb:51:22:68:87:db:aa:8e:a5:b4:
                    3c:6c:6c:57:69:a9:92:9d:8f:df:f7:37:ad:b9:cd:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:B0:92:20:F2:22:17:9C:C5:FA:7F:95:69:A0:E6:6A:D2:C7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.165.0.0/16
                  130.55.0.0/16
                  138.98.0.0/16
                  141.111.0.0/16
                  192.12.184.0/24
                  192.12.208.0/24
                  192.52.70.0/24
                  192.65.95.0/24
                  204.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:3a:18:09:39:cb:0c:f7:4a:41:93:eb:fe:ec:c7:04:55:
         78:c1:ab:7b:f0:76:56:08:07:a4:b3:da:5c:c4:a2:20:f0:eb:
         90:0f:27:2c:04:a9:85:02:6f:e1:b0:e2:72:ba:83:de:6c:2b:
         9e:59:6c:0e:7d:d1:1e:e6:00:8d:02:9c:1d:d7:7b:f3:b1:04:
         25:50:a3:03:1a:50:ba:a5:2c:8e:1a:b2:c7:74:1e:1a:7a:fe:
         77:ae:e8:5b:86:bb:c2:1a:f8:f8:61:41:ed:35:13:fc:ba:4d:
         87:24:f4:4c:5f:a5:3c:ee:7f:0b:71:86:c4:52:37:8c:bc:f8:
         47:c9:87:2c:a5:5a:9e:5c:16:18:58:13:e2:cc:62:7b:22:ce:
         38:71:22:26:e6:67:43:6e:a8:e5:31:b2:27:3c:84:62:35:40:
         b2:0b:05:c4:85:a6:4a:7a:bb:0f:c8:e5:7a:a4:45:d6:cf:b9:
         40:f5:bf:68:b0:9b:d8:8f:b1:88:8d:16:0c:1d:5a:21:99:19:
         a9:b7:bc:ef:f7:c0:c7:bb:c7:55:0f:63:c2:71:9f:4d:88:91:
         87:ca:c0:b6:52:7a:3c:b0:cb:19:39:e2:5d:1d:6e:80:57:55:
         ae:60:01:19:1e:d4:3a:6e:ea:df:ef:77:d5:8a:18:c5:39:5f:
         a7:fa:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:47 2025 by rpki-client