Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa
File:                     ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa (raw, json)
Hash identifier:          n4nUbf+cYyafRK190XdQQyNkER/LuJq08hCssFeBqmU=
Subject key identifier:   2A:09:CA:DF:42:6B:7F:7F:84:A2:50:86:E7:0C:B4:D9:7F:20:1C:34
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584806450458D24E6DDCF96B2C80
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     55178
IP address blocks:        192.230.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:04:58:d2:4e:6d:dc:f9:6b:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=3bf47bf0-9cc5-4604-a7bd-cdce2a30765f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:3e:94:ed:f3:b2:40:87:7e:bd:9b:9f:a7:
                    92:2d:e4:df:44:c0:0c:5b:66:52:a7:64:82:47:ce:
                    12:e7:3d:b1:45:95:59:dc:be:81:19:1c:04:5d:3e:
                    81:ba:bc:a9:4c:21:44:18:c8:47:ac:95:87:eb:3a:
                    60:e8:92:92:bb:15:99:22:10:45:88:7d:79:7e:59:
                    28:ce:37:c6:e6:2b:cd:3f:1c:c0:fa:f4:d8:dd:41:
                    ea:45:a0:8f:50:df:19:ed:d0:25:c2:e7:dd:7d:90:
                    12:f7:af:36:93:0f:10:83:fd:f1:6e:16:b7:94:85:
                    94:42:cc:f5:4f:c7:20:3b:04:9d:e4:c8:27:42:62:
                    ef:40:8b:71:d3:87:04:3d:8d:88:ef:ff:b4:2c:31:
                    ea:25:15:38:78:2f:64:be:69:1f:ff:e7:d7:c1:fc:
                    cd:c7:2f:b1:67:07:bf:51:1c:f3:72:d2:d9:49:37:
                    2a:80:c2:79:db:b0:cc:9a:9a:1a:3e:30:7c:c3:82:
                    76:df:ab:63:66:f6:97:6a:fc:9a:20:f1:67:ba:2f:
                    1e:52:c5:37:20:91:73:a9:51:ff:40:45:86:bb:15:
                    eb:e9:0a:71:0a:1e:e2:5d:bb:31:19:02:dd:0e:00:
                    03:ab:ed:74:09:a9:98:e8:33:ff:7e:da:c8:7f:a4:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:CA:DF:42:6B:7F:7F:84:A2:50:86:E7:0C:B4:D9:7F:20:1C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:19:e9:5e:5b:1a:45:2b:e4:f9:cf:16:4e:6f:68:7a:d6:55:
         67:e1:a7:63:f3:8e:11:62:3b:de:f7:ea:7a:43:38:ea:e0:90:
         d1:26:54:e1:4c:4a:e7:d1:b4:e5:9f:bc:af:27:14:23:a1:f0:
         e7:f1:e4:64:ff:20:dd:07:d5:73:6c:ad:4e:21:af:e6:ec:7f:
         eb:a2:3d:c7:53:10:c6:f7:93:da:8f:39:83:f9:62:53:2f:04:
         a9:91:52:ca:63:a6:89:35:3f:6b:c7:3c:15:be:ee:fb:c6:52:
         77:95:76:ee:b7:8d:f3:14:9f:fb:31:b5:8e:0f:54:f8:17:de:
         ad:bd:99:25:2d:72:73:80:18:c4:ee:44:0d:0d:af:a7:9b:41:
         fa:17:a5:c9:fc:7d:3b:5b:22:c3:ab:93:ef:18:86:d3:87:0a:
         78:38:0d:24:76:14:b5:6f:74:3d:11:0e:7a:c1:22:67:7c:7e:
         d1:9c:fc:b7:65:34:0a:b1:0b:0b:6c:74:a9:63:61:54:7a:c9:
         66:fa:6e:de:a7:aa:31:c4:a3:fa:87:0c:4f:7e:d7:a9:cd:28:
         0b:a0:91:f5:7f:a8:88:28:70:ff:18:13:4c:0a:97:26:46:07:
         3b:7d:7e:8a:75:0a:af:12:32:1e:b8:ef:58:5c:6a:90:c3:5c:
         73:7b:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:24 2025 by rpki-client