Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa
File:                     b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa (raw, json)
Hash identifier:          /6sUfmgtuTZAi4p4YL0XktxgUEDqOTr5tAw8lxrgpWQ=
Subject key identifier:   57:F8:D1:FB:80:34:71:8A:28:09:6B:8A:A0:BF:0D:2D:42:AD:65:31
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584832F034239DFCB00F00765A40
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     4476
IP address blocks:        192.68.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:34:23:9d:fc:b0:0f:00:76:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=8328fb88-aacd-47dd-bc4c-b96876260270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:69:9c:a4:7b:24:6a:d6:4d:b2:e8:57:ba:
                    62:30:e2:89:4b:4d:09:81:1a:68:b3:69:a8:03:7f:
                    28:bb:00:1a:02:f2:03:3b:ed:bb:4e:50:5e:f3:fc:
                    fc:24:79:64:32:76:7f:5b:6c:56:41:ad:77:a3:e8:
                    93:35:15:66:31:5d:2d:19:fe:7e:b7:ed:f8:27:22:
                    6f:b6:10:61:4d:b5:50:d8:95:dd:48:14:5a:52:c7:
                    6d:ec:70:42:63:21:b5:2a:ac:28:99:a4:03:a6:c0:
                    bd:18:f0:d0:04:31:51:e7:7b:2e:fb:86:80:7d:a6:
                    db:36:53:6a:4c:f2:06:74:ea:7b:73:4e:8a:a8:87:
                    8b:fe:c7:b5:12:bc:cd:41:19:45:84:41:df:e5:1c:
                    c8:38:d8:dc:82:8d:7a:f1:03:72:e3:3b:e5:4d:a2:
                    39:1f:74:b5:e7:28:72:d3:c0:fa:be:f9:69:dc:fe:
                    e6:c0:ce:16:94:90:cb:60:2b:8f:2d:60:76:ef:5d:
                    d6:cf:e8:85:bf:50:2e:e4:4e:b9:f9:c3:3d:60:5d:
                    c4:ee:4e:58:e2:42:6d:6f:e8:f2:b8:be:49:d5:37:
                    67:6b:ab:b3:96:b7:16:24:19:bd:dc:f8:65:7f:cd:
                    a3:24:4d:7f:3d:89:df:c0:30:cf:23:e4:63:6b:a7:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:D1:FB:80:34:71:8A:28:09:6B:8A:A0:BF:0D:2D:42:AD:65:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:4e:f8:4d:17:5d:5d:a5:ce:af:9e:8c:d8:59:9f:11:bb:
         dd:30:9f:74:f2:60:9d:7f:63:c7:bc:ee:e1:7c:25:d1:d2:dd:
         d3:d5:ab:04:d8:b9:6c:99:bb:a4:17:09:a6:bc:13:bb:df:39:
         94:1b:e3:5f:d6:c2:58:bd:c7:0a:af:5e:7d:56:9a:1d:db:3c:
         60:9f:48:d1:09:d9:f7:54:9f:d4:dd:14:58:3d:10:6b:bc:b5:
         26:97:c8:d3:79:5c:95:a4:f7:9e:63:6b:c9:aa:42:67:ce:53:
         6a:f2:61:8a:34:b8:39:4c:05:26:aa:b3:d4:25:9f:ea:62:7f:
         9a:e6:ad:5b:8c:16:98:79:5f:74:45:a6:c1:5a:e2:1f:d0:b3:
         14:98:71:d4:93:94:38:3b:7b:e0:1d:21:6d:43:02:b9:21:2f:
         f2:aa:35:bb:ba:16:03:54:53:0d:ec:12:8c:d4:62:04:4e:dd:
         9b:7d:32:51:5a:54:7f:6b:0f:d3:03:f0:0e:7a:82:4c:c1:6c:
         b4:8d:99:e4:49:2c:10:e2:8c:97:43:de:cc:36:fc:31:2d:52:
         05:78:7a:bc:7f:f8:a8:55:d2:7a:2a:55:4d:b8:d4:32:bf:2e:
         b2:5d:9c:0a:42:de:c5:20:43:c2:f0:6c:a4:fb:b6:67:5f:9a:
         8b:a0:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:27 2025 by rpki-client