Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
File:                     11bdd407-5883-3ad2-9117-b645eb104efd.roa (raw, json)
Hash identifier:          2QbOke/rEz1M0UxW/Zukzh2E66J9HKxnoQ9fjKcvKnc=
Subject key identifier:   9F:07:49:79:F2:30:5B:57:4C:28:6C:D7:3F:E0:44:AD:67:20:26:9F
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F432858488815E9AF9904E24865285400
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     31898
IP address blocks:        43.231.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e9:af:99:04:e2:48:65:28:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=8e4c6098-7b42-484e-9330-6bb393a0e0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:b4:7b:6b:5e:b9:66:63:c8:c5:f3:ed:ea:
                    da:2c:77:c9:9d:53:4f:9c:31:e8:56:24:a4:09:d2:
                    82:9a:d8:24:e8:2c:30:2e:0b:f5:f6:91:6f:65:5a:
                    10:49:8b:1f:f1:61:8e:ab:c0:98:d5:8b:cd:94:88:
                    59:bd:a5:3c:14:7b:c8:2c:67:6b:fc:fe:48:63:c6:
                    67:f7:59:f8:59:9d:54:e2:d5:4b:df:42:03:34:fe:
                    e6:03:29:fa:93:65:ee:59:cf:b9:4f:47:45:cd:75:
                    d5:d0:7b:cd:02:7b:8a:a4:89:bf:f5:71:eb:38:38:
                    14:86:b1:b3:9f:d9:3a:9c:de:c3:34:99:f0:09:39:
                    5a:e8:b4:50:2a:11:98:af:33:eb:21:3f:6b:1d:f1:
                    d4:c4:fe:c4:ee:99:ba:fe:44:42:70:7a:18:60:f9:
                    89:f6:27:93:c9:33:0f:31:28:d2:26:49:e6:bf:ff:
                    eb:a0:3e:26:7d:c1:21:81:a2:d2:8f:33:88:54:ff:
                    bd:cd:dd:79:ef:17:a6:e7:d3:dd:56:44:22:c8:87:
                    dc:a2:11:fc:56:1b:94:e0:da:e0:6c:78:9f:33:18:
                    3a:6c:ce:94:64:00:b5:70:5f:00:90:72:74:6b:a0:
                    c5:8e:7f:5f:90:9d:e8:44:16:11:88:cb:3e:f4:26:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:49:79:F2:30:5B:57:4C:28:6C:D7:3F:E0:44:AD:67:20:26:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:47:07:50:51:72:62:e0:5e:89:70:54:41:77:44:76:be:87:
         08:36:12:4b:cb:0e:bf:b9:90:90:d4:d9:5e:52:33:3d:a3:93:
         42:00:ca:79:5e:dd:e0:13:35:a7:4f:46:b1:9a:28:1e:b6:56:
         2b:33:cb:4e:cc:aa:42:ea:21:87:5a:d8:26:c8:de:66:de:c6:
         68:57:d1:1c:ed:29:10:18:01:46:de:33:ec:66:e8:f4:ef:af:
         f9:cb:c5:d9:1c:3d:6e:b4:77:ad:43:99:db:1f:b8:b2:f8:10:
         bf:3f:10:77:3c:d1:96:73:84:a5:0a:72:ac:66:f7:07:ab:75:
         0f:95:a5:7c:68:5a:09:90:ab:e1:91:d1:f1:e5:18:de:f1:3a:
         8c:64:f3:f5:57:d2:89:de:39:04:45:2b:5d:52:51:03:c5:d9:
         14:48:ff:bd:c5:ac:84:e3:05:65:ce:af:b3:9f:c6:a6:38:09:
         e0:9b:cc:c3:70:ac:91:e2:da:7f:14:8b:98:e5:7f:07:3d:c6:
         e6:ac:5c:f8:8a:46:f4:8d:da:07:79:f3:fc:fe:cb:ee:09:e2:
         5a:b3:46:57:c7:f3:f3:f3:bf:f5:e1:82:9f:dc:d0:b6:ca:26:
         0d:89:b9:02:eb:27:2a:76:31:79:91:50:2b:e3:4e:1f:f9:b4:
         6f:5f:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:43 2025 by rpki-client