Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa
File:                     54427769-b1ab-3c85-94cb-0721b1f9f051.roa (raw, json)
Hash identifier:          GCOa7JR4WxdtDqa3Ig16//E3KNFc71jyftD9VMEnPAs=
Subject key identifier:   64:43:22:C7:B3:22:FD:85:06:AC:36:9C:11:A2:9A:66:7C:20:FB:0C
Certificate issuer:       /CN=40a67241-3cd8-43fd-9ff7-3e18bd867926
Certificate serial:       010D0C9F43285848309B852BEC5B3FC081878F80
Authority key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa
Signing time:             Fri 13 Dec 2024 05:59:03 +0000
ROA not before:           Fri 13 Dec 2024 05:59:03 +0000
ROA not after:            Thu 13 Mar 2025 04:59:03 +0000
asID:                     14618
IP address blocks:        202.37.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:9b:85:2b:ec:5b:3f:c0:81:87:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926
        Validity
            Not Before: Dec 13 05:59:03 2024 GMT
            Not After : Mar 13 04:59:03 2025 GMT
        Subject: CN=b11e43ca-8163-4a77-b4aa-58d5a590b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:3e:76:01:35:5b:0b:79:cb:c4:ed:1a:a1:
                    e1:98:49:d4:76:26:5a:1b:8c:c4:63:fc:99:f8:c6:
                    e4:df:0a:e6:60:5b:be:fc:4e:3f:b5:99:77:e9:58:
                    07:52:cb:7f:7b:01:bd:8c:0c:0c:89:71:73:b2:f2:
                    6c:15:82:c3:3c:97:cb:74:6d:82:59:ff:06:6c:7b:
                    5a:61:de:30:5e:f5:1c:2f:f4:c4:a2:d5:82:33:21:
                    f1:15:93:b4:03:9c:46:83:1f:e6:a3:e8:f0:21:22:
                    1a:e8:83:58:0e:d8:75:5d:f5:f6:6b:59:f6:03:76:
                    50:b8:38:d1:bb:14:22:8b:80:69:8d:97:da:c5:e9:
                    32:0d:11:68:b4:3b:31:d4:b4:61:b5:f9:96:1c:f9:
                    f7:61:98:43:3a:be:d9:36:7e:e8:04:9b:93:37:0c:
                    41:c0:d7:76:ce:eb:b2:5d:2e:12:17:c6:ec:74:af:
                    d6:b6:33:cd:c0:95:f8:47:b8:5a:41:74:68:8e:9f:
                    44:42:27:42:02:a6:11:3e:c7:2c:be:76:bf:13:65:
                    5a:cf:23:d0:c9:51:aa:3e:46:00:26:c3:3c:8f:d1:
                    cb:bf:b6:5a:86:e5:de:0c:f8:cd:4d:e7:f3:d0:ae:
                    3f:e6:75:dc:f9:b4:8b:48:d9:a8:ad:b2:10:01:ad:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:43:22:C7:B3:22:FD:85:06:AC:36:9C:11:A2:9A:66:7C:20:FB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:ed:aa:08:c3:7b:37:30:4c:15:0c:93:05:e8:67:09:a3:
         38:e8:34:a2:34:c4:5f:33:33:d5:ae:27:8c:1d:f0:3c:c1:14:
         a2:87:94:ff:90:e8:6d:0a:d2:49:85:71:9f:b3:0d:1a:fb:47:
         f1:76:08:54:c0:ca:41:df:d4:61:1d:f3:9e:54:dd:a4:b7:6c:
         28:4d:31:b8:c3:c8:e1:19:88:22:0c:80:f0:6f:39:52:b9:9f:
         38:44:2d:c2:95:b1:24:5c:e5:3f:3a:e8:b6:1f:75:55:cf:ec:
         dc:b0:19:de:c4:96:af:c9:eb:18:80:9e:26:53:fa:90:98:0a:
         63:71:2e:11:fc:41:36:04:99:f3:6c:9e:66:52:f4:9f:57:46:
         09:b0:a3:9f:32:27:48:15:08:14:93:0d:b8:1e:eb:c2:20:f8:
         41:6b:09:df:f2:59:db:9d:ce:e8:7f:f4:f2:98:d8:b7:d0:20:
         7d:2a:24:ba:e9:08:d3:ce:bf:93:f2:52:45:a6:54:70:b2:2f:
         38:5b:22:bd:9f:fa:45:a5:79:5d:2d:b3:ae:19:da:fd:62:1f:
         05:b7:7b:fa:0a:73:d3:1c:5c:95:da:0e:69:4f:dd:14:1a:c8:
         6e:fa:a1:a5:84:93:6d:02:59:8c:05:47:47:8e:8d:c7:ef:10:
         0d:b8:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:33 2025 by rpki-client