Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa
File:                     effebbf7-ee2d-3137-8b68-780d284e81c1.roa (raw, json)
Hash identifier:          atjt8EX4BeDYrhOag6djSYmTdVbjEiBtWbp+XgjSFag=
Subject key identifier:   AD:98:58:D3:22:31:5C:45:77:E6:4C:87:45:45:88:22:87:0A:A7:BE
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F432858483F802BEAE531BE8789CFDB00
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     10430
IP address blocks:        173.229.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2b:ea:e5:31:be:87:89:cf:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=b083bc93-c4ee-4700-86c7-13de1f397ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:0c:ca:0d:d6:04:7c:67:72:1c:d9:ca:5d:
                    b9:9b:0e:56:38:55:a4:ea:7a:67:27:00:7c:f2:be:
                    93:bd:19:14:cd:1b:df:45:69:ee:dd:c0:a0:24:8c:
                    e6:90:9d:95:a1:39:b7:20:74:2e:56:9b:0e:48:35:
                    a3:f7:40:42:ff:3d:e6:63:d2:f5:18:8f:f5:c0:fe:
                    2b:aa:6b:3c:76:f0:f5:5e:f0:b5:1f:c8:45:ae:cd:
                    61:bc:0b:36:fc:b8:60:90:c0:44:de:36:c4:94:df:
                    3c:59:c1:67:f1:22:f0:de:2e:80:2c:7c:15:21:7d:
                    05:42:bd:a5:86:8d:ad:36:1f:a8:89:29:d0:07:1b:
                    2d:9f:31:e7:7d:be:1e:de:be:98:8f:2d:eb:cd:10:
                    fa:cd:0d:f7:b5:9f:75:a7:d0:c5:aa:11:92:92:33:
                    71:b3:37:5a:a7:6b:01:c4:32:73:79:fa:43:31:1f:
                    8b:5d:42:31:35:d2:23:a3:49:a1:10:70:9b:c4:db:
                    fb:fc:0e:03:43:d1:35:72:bd:24:06:4c:80:61:51:
                    ea:b7:35:d9:13:8b:d0:ec:d1:ea:1c:60:b7:c3:f2:
                    ea:1d:6b:df:4c:d5:86:8c:83:ae:aa:3a:5d:b3:c3:
                    dc:f0:20:bc:e5:20:ce:15:b2:72:60:6c:15:85:10:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:58:D3:22:31:5C:45:77:E6:4C:87:45:45:88:22:87:0A:A7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.229.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:c3:31:53:3b:09:3e:6b:93:e2:f1:ca:32:7e:20:5f:66:
         87:0b:4b:f3:5a:e7:19:b1:dd:16:4a:21:03:51:8d:64:7f:2a:
         a8:9c:03:11:34:5d:00:6b:e8:7c:48:7e:f0:47:13:86:5f:fb:
         fa:fe:2b:60:5a:37:94:87:e9:a8:c5:9c:34:64:b8:ab:7d:21:
         24:cb:7e:cd:e6:24:55:d0:23:d6:fd:6d:b6:d2:ef:d1:47:b0:
         c4:13:fe:be:8b:08:33:7f:bf:a7:3b:ff:ed:09:d6:b2:de:6d:
         60:7c:b3:55:0d:95:e7:0f:ae:e7:47:18:89:81:98:0a:bd:c3:
         ee:d4:59:4a:06:89:c1:f3:7d:3e:bd:ee:53:d7:d8:c0:4e:60:
         a6:9f:51:00:24:32:e9:2d:2a:e1:63:f2:0b:6b:28:2e:51:24:
         cf:85:bc:b3:e6:ac:27:5f:27:61:6f:48:04:83:39:b0:34:88:
         4f:dc:67:4e:f5:3f:0f:3b:d8:ae:27:f1:01:3c:bf:5b:20:b4:
         42:81:87:59:4d:d7:c5:a4:22:bb:90:f7:c8:a4:49:90:ff:f6:
         2c:72:f0:d7:ed:ed:23:3f:a4:4a:5e:8c:c7:4d:27:f3:57:ae:
         a7:50:5d:9f:93:05:72:7d:a7:f1:94:63:b3:6e:4e:32:72:69:
         3b:34:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:15 2025 by rpki-client