Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa
File:                     d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa (raw, json)
Hash identifier:          8t1CP5yzGPwV/uNtJMrLuiap0tVpeDu7Rdh5MrtC4R4=
Subject key identifier:   91:C1:6C:FF:04:3A:9F:76:82:7D:E1:3C:F0:8F:60:A6:55:19:46:51
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F432858481C9A8B417909F0EA87F5CE40
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        155.63.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8b:41:79:09:f0:ea:87:f5:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=32069583-7ab2-4c65-9392-9ee34f118915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:21:95:d9:7c:0b:21:fb:03:18:59:6f:a1:
                    d1:9e:18:0a:ff:80:76:fa:4e:d2:51:5d:b2:a0:78:
                    4f:4f:b8:af:4e:72:07:f7:86:1b:d8:88:6b:3e:b0:
                    71:16:f6:72:ee:c8:ea:78:95:3f:a9:87:0d:fe:c7:
                    1e:a7:ba:cb:c8:f5:43:81:85:88:27:b9:27:57:d5:
                    e0:59:d7:ed:3d:fb:74:cb:a5:3d:51:c0:a0:73:e1:
                    8f:4b:00:30:dc:1b:bb:ca:ba:33:52:df:d0:23:5e:
                    14:5b:10:cc:8c:9e:47:42:28:80:bd:c7:ac:3e:87:
                    01:13:2d:c1:21:c2:0b:29:31:ec:76:29:2e:a3:71:
                    5f:be:70:65:63:c6:76:c3:50:8a:0b:a1:61:bf:df:
                    fa:36:ac:5d:55:7c:98:ac:94:68:5e:65:70:7e:40:
                    f3:33:91:a7:d8:58:af:c7:da:d1:1e:3f:85:a1:ec:
                    c2:19:42:f1:a2:59:3b:0d:d8:83:03:ce:b6:f6:f6:
                    8f:ac:f8:dd:df:da:0f:c7:9c:47:ff:21:0d:7d:91:
                    72:2d:d4:27:e8:ed:67:e0:ed:ec:28:28:a3:67:9b:
                    9e:a8:98:33:c9:02:2f:c0:5b:a7:62:94:da:d4:da:
                    1e:f1:d6:7e:a0:3c:85:ae:12:31:ff:4a:36:bc:3a:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:6C:FF:04:3A:9F:76:82:7D:E1:3C:F0:8F:60:A6:55:19:46:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:5a:43:59:72:f1:1f:e7:70:c2:83:71:d2:22:68:0d:1e:
         52:70:a0:56:d6:84:be:47:ec:b7:47:75:5f:89:b0:0e:d3:88:
         61:04:9e:fd:0c:6c:cc:9b:c4:b3:48:d6:4d:25:e0:17:77:b2:
         e5:95:e4:5c:00:cf:f8:4f:64:65:a5:2a:b5:3d:50:f4:3a:2c:
         1c:f8:ac:64:6d:83:36:82:e6:2b:7f:1f:72:41:68:07:f1:f3:
         93:a7:6c:f4:5d:35:d0:40:b9:32:89:c4:6f:c5:a8:25:4f:17:
         29:33:4c:2c:f3:bf:43:ab:eb:f9:3c:c6:13:ba:c0:f0:8f:ed:
         fc:63:75:2e:90:c0:d5:5a:31:e8:b0:e0:46:52:74:14:50:44:
         2d:bc:4d:f5:3d:78:4f:c0:57:90:6c:68:5c:62:90:45:cc:ea:
         36:a1:22:f8:6a:30:6e:16:0b:07:0b:a4:aa:d6:cc:16:13:49:
         89:96:4b:24:9d:3d:a9:83:f9:60:71:6f:89:50:ba:88:57:bc:
         8a:2b:8d:36:bb:f2:c6:78:de:22:9f:4e:ba:e3:6d:46:cc:fe:
         24:23:6d:e3:c8:a6:6e:ab:36:7f:21:04:47:2d:af:90:08:28:
         63:1f:94:41:b4:dc:9e:09:03:90:58:1f:4f:b2:da:f8:dd:56:
         82:29:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:16 2025 by rpki-client