Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa
File:                     01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa (raw, json)
Hash identifier:          34DxFAVNKHAzmupl/2qprlxc9FAGYYld7kC0Pej7NKk=
Subject key identifier:   DE:43:21:BD:F6:2E:C5:93:DE:32:74:6F:15:92:52:BF:50:2D:7C:E3
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584807AA6A3853065E3A5DF68380
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     55178
IP address blocks:        192.230.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:6a:38:53:06:5e:3a:5d:f6:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=3ef3ec50-c409-4a04-99a6-9217309e078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:fa:56:89:fa:78:29:81:03:d8:4a:9a:e2:
                    86:56:ee:a8:5a:be:6a:a7:e2:ce:71:b7:f4:3d:30:
                    3c:11:77:f6:1b:2e:02:37:b5:99:42:ef:34:d5:92:
                    14:56:69:45:da:ed:6e:b8:4c:bc:dc:9d:0f:96:90:
                    6c:eb:f9:17:c6:56:79:a1:e1:8b:32:2c:38:b3:37:
                    93:61:ac:fb:05:b3:90:38:39:94:ed:e4:8e:d8:1f:
                    21:fa:fb:88:8f:c2:bf:47:f4:ed:07:fc:87:21:5b:
                    f4:d1:c5:8d:ca:ba:b2:73:e2:7d:37:98:7c:ec:8a:
                    63:91:79:df:da:85:64:15:70:3b:97:ae:bc:01:48:
                    da:18:5c:ca:e3:00:46:29:df:48:06:e3:02:04:1b:
                    d8:94:4c:e4:7f:39:cc:ed:74:53:97:bc:7a:a0:65:
                    ee:41:30:94:3d:0e:1e:85:af:c3:01:9f:58:52:d5:
                    a3:ad:ac:1b:00:ef:1f:e3:02:e2:46:63:13:dc:19:
                    32:ea:68:6a:23:63:98:7a:6d:18:7b:f4:28:92:ef:
                    ec:78:60:d3:84:e6:ab:eb:4d:6a:91:67:b3:1e:57:
                    9e:f8:c2:36:db:1b:65:5a:ea:91:79:07:89:a5:85:
                    47:86:74:4a:53:e4:2c:dc:38:69:46:95:cf:88:79:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:43:21:BD:F6:2E:C5:93:DE:32:74:6F:15:92:52:BF:50:2D:7C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:01:65:97:1c:82:25:d6:dd:c3:dc:51:d2:b7:c7:3d:ba:16:
         7e:e1:d0:72:d6:4b:e2:c3:c7:54:d3:76:fa:1d:0a:72:1c:08:
         bf:c7:69:5e:64:ac:27:20:b1:c9:89:4b:84:25:52:7e:a0:52:
         3b:9d:d1:ff:e7:e2:f7:ab:01:01:5a:f7:9f:44:be:c8:a6:94:
         72:8f:6c:0d:f0:d6:51:dc:d6:71:3e:97:18:22:33:dd:98:a7:
         04:a6:0e:60:fc:fe:1a:0b:93:31:6d:2a:00:9b:f7:1c:3d:49:
         4c:50:4a:d1:c7:2a:db:e6:1a:e3:a3:05:8c:44:fc:24:26:f4:
         e8:98:94:93:66:49:53:20:af:a7:6f:31:5b:e1:a4:ad:ab:32:
         86:3d:11:94:66:76:3f:44:a8:3a:b9:6d:23:9a:27:1b:27:af:
         81:d8:37:df:fc:34:64:b0:46:90:05:f7:70:74:6b:78:8a:a4:
         2b:b3:b5:53:b3:4a:cb:0f:de:fd:1d:a4:fd:39:f5:2a:39:af:
         45:dd:25:e8:5b:d0:96:ca:11:5d:8a:a2:9e:1a:b6:3c:d8:2c:
         87:c6:79:10:ef:10:70:c4:fe:3b:14:05:9e:b2:81:40:ef:70:
         84:2c:f6:36:70:56:75:9d:16:04:63:13:12:96:af:73:e8:54:
         ed:e8:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:49 2025 by rpki-client