Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa
File:                     59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json)
Hash identifier:          6wwPHuJtyl3pFYaT4PSmbl8iZ4KN388MUAIMkqwycqA=
Subject key identifier:   A0:2F:01:E6:66:F5:B6:AD:73:42:7F:9E:35:58:43:1E:15:1A:46:9B
Certificate issuer:       /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
Certificate serial:       010D0C9F432858482D5A9189205C5B0BE4FC0700
Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     209242
IP address blocks:        199.33.230.0/24 maxlen: 24
                          199.33.231.0/24 maxlen: 24
                          199.33.232.0/24 maxlen: 24
                          199.33.233.0/24 maxlen: 24
                          2001:503:ff40::/48 maxlen: 48
                          2001:503:ff41::/48 maxlen: 48
                          2001:503:ff42::/48 maxlen: 48
                          2001:503:ff43::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:91:89:20:5c:5b:0b:e4:fc:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=0f1a2be5-fa4d-4669-86f5-ea5c5a2ff86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:c4:c7:ac:48:56:0f:a9:99:8d:67:75:76:
                    3a:08:85:6e:91:28:be:19:47:e2:ea:ca:62:42:d2:
                    3b:02:81:db:53:e7:15:ef:58:0d:47:81:87:0e:c2:
                    9a:77:29:cf:7b:88:59:04:00:d1:9e:44:e9:e1:4e:
                    59:14:e0:a0:50:b1:2f:36:c5:f0:0a:4e:44:2a:20:
                    59:63:41:cf:c0:f1:81:1f:ff:eb:2b:a5:f9:82:4a:
                    69:0d:30:20:a7:70:ff:16:fc:de:17:b0:13:0e:be:
                    5d:8f:12:68:38:1e:c6:91:52:aa:26:db:b5:6f:3e:
                    91:e1:25:69:50:5a:d3:15:9c:e6:54:19:fa:e6:b1:
                    85:6e:0f:5e:09:50:59:1f:38:9d:90:fa:82:c1:25:
                    fb:80:99:44:e8:06:4a:17:0c:d7:ed:9f:86:fe:99:
                    eb:df:1b:60:36:e6:90:6d:3a:ee:f7:6c:83:4e:29:
                    a3:1f:c1:09:cb:cb:e0:98:77:43:71:aa:fe:90:49:
                    81:31:5b:27:aa:2c:56:6e:08:bd:a8:4d:09:3b:a0:
                    e2:92:a0:f1:1b:ef:91:a1:43:9e:97:23:90:08:a5:
                    7d:e7:18:0a:31:a9:e7:f1:ef:2f:ac:0b:4a:70:12:
                    7a:f6:29:85:77:28:58:10:6c:da:aa:98:5f:69:34:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:01:E6:66:F5:B6:AD:73:42:7F:9E:35:58:43:1E:15:1A:46:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.230.0-199.33.233.255
                IPv6:
                  2001:503:ff40::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:58:19:c4:d5:d4:74:9d:5c:43:5a:eb:12:fd:8a:2b:92:
         c5:42:93:26:d0:1d:7e:9c:ff:f9:2e:78:09:00:f6:45:5d:42:
         97:fd:e4:f3:56:02:9b:95:ee:9e:54:17:6e:bc:26:33:59:b6:
         34:24:5b:a4:2a:3f:32:55:6d:87:4e:ee:fc:0f:da:78:92:c7:
         81:c2:1f:fc:a1:46:43:ea:84:ee:35:8e:ac:b6:51:06:77:93:
         05:c5:7c:74:fe:51:7f:be:31:75:79:4e:b0:da:35:df:9c:3a:
         64:64:45:ea:9b:fa:6f:25:c5:9c:7d:06:1d:5c:be:ff:ed:6a:
         e6:c2:f9:f6:86:6d:73:ed:ee:d4:37:92:84:e1:de:d8:ca:2f:
         4b:43:25:e1:74:c3:35:dc:33:16:63:d0:a0:58:51:f3:a1:0d:
         3d:9b:a6:d3:fa:15:20:9f:bb:b6:5a:a1:49:0c:e1:96:4f:6c:
         f5:ae:19:ff:32:1f:b3:1d:8a:ec:cf:47:7d:c1:ef:b5:37:75:
         4b:71:c1:90:cc:6e:b9:73:47:5f:39:43:8c:76:b3:ca:d5:14:
         1f:cf:6c:b8:e9:a8:3b:c1:94:23:91:66:39:0c:d3:cf:2c:0d:
         5c:43:a6:21:9e:18:61:9a:d4:1b:9f:74:ac:01:0c:f3:4e:74:
         07:11:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:45:08 2025 by rpki-client