Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa
File:                     d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa (raw, json)
Hash identifier:          /1yKHhlR8kBu2UbBM8dxQj/CdROTN66ucgA47cVeiR4=
Subject key identifier:   43:F2:AF:76:EC:13:D0:BE:FE:8F:04:87:2B:79:F5:86:A8:A5:26:BA
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F43285848530AF4CB29EC110D54F85100
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        168.91.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f4:cb:29:ec:11:0d:54:f8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=656b7309-7b7b-4a1e-bd9c-d7356f11cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:b0:20:1b:6b:86:e2:f7:f0:d6:06:a6:ee:
                    cb:26:cd:c8:a9:ab:66:1f:19:06:5e:08:fc:f5:1b:
                    e3:14:01:85:f5:65:dd:66:7f:68:e0:24:53:90:43:
                    33:9b:8c:b5:84:fa:16:cb:9e:19:09:f6:f3:34:a7:
                    30:87:b5:7b:38:12:24:d6:52:77:41:d9:5d:5f:1c:
                    15:5a:1e:2a:09:96:f7:21:07:20:a3:e2:ef:29:bb:
                    f7:7d:90:a6:54:cc:f6:2e:09:6d:44:06:b7:f9:44:
                    00:11:0f:c5:1b:a3:23:21:f8:9b:66:07:24:15:39:
                    e1:57:49:5d:69:5a:a1:66:a0:1e:58:a9:39:01:d9:
                    a8:d9:07:a0:e7:9d:fa:83:d0:55:b4:4f:1c:99:d3:
                    eb:a7:dd:00:de:9a:2f:be:c8:a6:e3:57:a6:e2:2b:
                    12:71:8d:81:e9:d0:c3:34:15:70:93:2a:25:6d:52:
                    8c:95:9b:d8:53:07:73:ee:4a:ae:0b:bb:82:8f:93:
                    38:59:49:e6:81:fa:24:30:6e:ee:64:f1:20:d7:ad:
                    a5:95:c0:a7:b5:2b:55:b1:2a:fc:7b:de:c6:e5:f8:
                    35:a4:d0:9e:f3:a8:45:69:e2:2d:d3:60:91:f2:82:
                    3b:10:c3:47:c1:a7:be:07:52:f8:ed:2b:30:07:4d:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F2:AF:76:EC:13:D0:BE:FE:8F:04:87:2B:79:F5:86:A8:A5:26:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:ed:08:30:cd:5f:d1:1d:2c:be:71:e2:e9:8d:ca:00:42:c3:
         8a:d8:49:1b:d1:5b:15:c4:cd:86:1e:54:ec:d2:39:b4:9a:b0:
         7d:d6:b1:03:97:b0:5a:2f:b8:5d:db:bd:d9:43:ff:6d:63:72:
         32:a9:ce:55:a7:1d:f7:9d:80:c1:c2:02:43:f4:e2:0e:ad:9e:
         56:59:37:f0:5c:04:3c:fa:20:dd:1d:ba:88:a0:ad:73:64:d4:
         72:3f:5d:b1:5b:fb:4f:93:d1:fe:7f:5f:7d:7c:62:d6:0b:2a:
         a8:b8:a0:53:67:95:3d:0f:0a:15:cd:d4:ee:fc:9a:ae:fe:fb:
         3a:43:69:66:0f:52:ca:e9:cb:48:46:6a:67:50:00:f1:fd:eb:
         55:ee:d8:ea:c1:9d:64:85:d1:86:b7:04:b6:d3:f3:72:5f:d4:
         d2:18:4a:05:d4:70:59:b8:91:fb:f8:c6:e9:b7:2e:2c:87:93:
         05:53:bb:ec:5b:19:28:df:b6:30:29:86:c6:88:01:b6:48:31:
         84:80:e4:a2:a1:ff:97:60:47:07:9b:02:08:d8:bd:75:a0:15:
         81:9a:61:02:14:29:96:9e:c0:b5:88:2d:45:67:85:92:11:b4:
         b6:9f:c3:b4:82:19:df:f8:a7:df:88:06:20:22:3a:de:9b:24:
         b5:e4:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:58 2025 by rpki-client