Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa
File:                     7970207c-cff5-3b13-b007-d6300f998d3d.roa (raw, json)
Hash identifier:          YSOqjLVko1KW3UUarsfGbe1L10tYKZoHcoo2GHMHrfI=
Subject key identifier:   02:7D:C4:02:66:70:34:5E:BD:58:7B:4B:8A:B6:3B:78:62:C5:7C:AA
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584854703A40BA16ED7FD15C1240
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     54994
IP address blocks:        138.113.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:3a:40:ba:16:ed:7f:d1:5c:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=61a1334c-1811-46ea-abe0-82083a95e027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:ec:b9:f1:5b:fd:09:d4:67:b4:88:d0:06:
                    d4:e9:b9:c8:d1:f6:8c:8a:b0:36:b5:44:25:87:a7:
                    12:ef:23:94:b6:d9:c6:a9:d0:1a:95:23:8f:98:d8:
                    0d:64:3a:9a:be:c1:d0:f5:e1:ec:7a:4d:0c:13:0d:
                    f0:fa:b8:64:37:f4:37:5e:f7:89:5e:aa:18:84:53:
                    76:91:6c:b3:10:1c:ea:55:5f:3a:92:2d:00:03:3d:
                    a4:cd:30:3d:23:1f:cd:d2:18:ee:d7:65:30:c6:0d:
                    1a:1c:3d:db:4b:6d:5a:95:b6:76:99:72:ac:b8:3f:
                    b6:be:87:91:83:de:cc:6b:a1:19:fc:25:be:67:84:
                    c3:f6:a5:ae:39:8c:93:b2:65:ab:06:33:38:7d:34:
                    60:86:1b:cc:35:ff:66:af:f6:62:1b:0c:d2:f0:ad:
                    f8:fb:0d:d6:85:e9:9a:2d:59:d2:6e:1d:2f:35:86:
                    1f:c6:35:ff:25:74:55:d2:d7:29:55:fa:c0:2d:d9:
                    e7:e1:e0:c8:a4:86:18:ce:e6:e4:55:47:4b:86:28:
                    1e:f7:21:51:68:26:16:8e:1c:9d:d3:45:83:24:d4:
                    06:aa:bf:e3:46:30:44:79:e2:6f:d6:78:3a:9e:52:
                    5e:bd:2e:84:12:64:65:b6:4f:b0:85:b9:69:3d:9f:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:C4:02:66:70:34:5E:BD:58:7B:4B:8A:B6:3B:78:62:C5:7C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:66:38:f9:cd:09:99:91:b7:53:76:91:0e:4d:8b:ca:ee:cd:
         20:c7:79:bd:f5:e3:7f:e4:c7:76:ef:69:19:7d:51:72:98:ec:
         ab:d4:1b:2e:47:09:6f:00:b0:63:30:78:74:bf:66:2a:2a:1e:
         da:11:79:4b:8e:f2:54:d6:07:d4:12:b4:76:2a:7e:77:95:04:
         08:58:be:46:80:55:03:2b:cc:d7:5b:ba:e8:ec:6d:5e:cb:04:
         60:db:1d:79:e2:ea:9f:a1:fb:95:96:60:bb:bc:97:ab:b1:1b:
         23:32:fe:a7:2e:e2:5a:5e:9b:63:9a:36:9d:36:49:e4:e0:87:
         46:97:d2:1c:b2:55:c5:d7:fb:72:d1:ef:d6:e7:de:06:3d:de:
         aa:06:bf:4a:af:d3:ae:e8:5d:c4:fb:4a:d0:88:df:be:d6:c2:
         46:c8:f0:d9:5d:59:af:17:08:44:60:99:b2:c4:22:25:20:1c:
         6f:a8:14:d7:61:37:02:69:58:3e:f2:d9:8a:fb:ad:6c:37:a0:
         70:40:09:2a:6b:5c:3c:83:6d:09:10:db:f2:db:65:ae:02:c7:
         2b:e3:05:af:b1:9b:7c:0b:86:96:df:d1:d7:86:19:36:94:a8:
         41:6f:c2:8e:fb:bb:b4:67:85:a9:b7:45:ff:84:62:12:4e:5a:
         16:97:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:53 2025 by rpki-client