Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/5d33845d-9233-398e-b116-df7aea67f4ab.roa
File:                     5d33845d-9233-398e-b116-df7aea67f4ab.roa (raw, json)
Hash identifier:          SgCblGf8LBTlZj4/KgAsrDd6gJvnob6jVZgZCyLYHyg=
Subject key identifier:   2F:D7:45:D3:EC:C8:CF:F7:BC:6B:12:F0:B2:58:16:2A:D5:C2:3F:3F
Certificate issuer:       /CN=24be1fd9-9c64-4c2e-bbee-069ffff5ec0e
Certificate serial:       010D0C9F4328584823954BF612969B8DC698B2FC
Authority key identifier: F9:FC:26:4C:13:4E:86:C9:03:1A:A6:09:FC:FB:24:77:77:E9:5F:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/5d33845d-9233-398e-b116-df7aea67f4ab.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        172.83.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4b:f6:12:96:9b:8d:c6:98:b2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24be1fd9-9c64-4c2e-bbee-069ffff5ec0e
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=d8558e21-93cc-431e-950f-a030d4a8db91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:90:f3:69:ef:99:36:21:27:7a:0b:36:e1:
                    d1:70:8f:2e:8f:92:ee:8a:ff:46:94:11:de:ab:9a:
                    2a:92:03:47:2f:d7:4c:af:29:29:72:b5:30:da:32:
                    07:d9:51:93:48:89:77:f5:9b:21:8e:40:6a:36:2f:
                    7c:fe:43:b6:a1:83:d8:28:ad:2e:03:c7:9e:62:9c:
                    eb:1a:13:ee:b7:fd:e2:12:16:f7:a8:83:48:d4:61:
                    53:11:dd:ac:d9:af:6a:94:34:ff:c0:04:db:ba:52:
                    5a:03:25:5e:b2:bb:24:53:2b:6a:99:48:0d:2a:d1:
                    cd:08:4d:bf:b4:28:c2:94:a9:35:99:e0:d5:76:d0:
                    54:be:86:9b:64:92:0e:c1:ca:dd:c7:58:a1:7b:c3:
                    65:ab:0d:77:90:a9:14:ab:20:e2:8d:71:c4:88:63:
                    11:f0:95:a5:1f:d1:29:3c:82:3e:15:c6:8a:33:af:
                    b6:12:48:83:3d:1d:34:1a:17:b5:1c:66:c0:9e:7b:
                    f7:16:f5:3d:12:7a:2b:96:6d:43:43:b7:f9:3e:de:
                    a1:c1:aa:31:18:5a:db:05:61:53:2c:9a:d8:00:47:
                    b5:d6:14:d2:b7:c4:d6:9b:44:af:bc:5b:15:05:5e:
                    0d:55:15:5e:1a:aa:70:e1:d1:11:1a:51:b8:bc:f6:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D7:45:D3:EC:C8:CF:F7:BC:6B:12:F0:B2:58:16:2A:D5:C2:3F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/5d33845d-9233-398e-b116-df7aea67f4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FC:26:4C:13:4E:86:C9:03:1A:A6:09:FC:FB:24:77:77:E9:5F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:e7:70:3d:a8:b5:35:22:fb:23:64:5b:4f:dc:53:36:43:
         11:e8:8b:c7:97:38:a3:e7:b7:9a:5c:36:d0:bb:7a:89:84:b5:
         9c:32:47:12:d3:e6:e2:92:9c:7c:76:8d:c0:96:5b:c2:00:5b:
         ea:c3:08:32:3d:ae:4b:5f:57:7a:fb:53:31:0f:2d:22:b3:86:
         1c:31:b2:74:a4:48:fc:c2:a0:58:c9:67:c3:ac:41:fa:74:7f:
         dd:11:31:22:f6:03:0f:34:2e:8e:f5:5b:0c:39:3b:89:25:e4:
         e1:0a:1e:c9:22:b8:17:04:66:51:6d:d1:1b:92:a9:d8:58:b6:
         43:05:a9:e5:02:94:9d:a3:11:bd:6d:2a:76:e1:72:14:bb:b8:
         85:93:ec:70:1b:78:c8:ff:89:5f:64:19:54:6a:4c:11:19:78:
         6e:5c:9d:35:95:11:6a:41:0b:d2:c8:67:c4:c7:d5:55:49:be:
         58:8f:fd:4a:33:49:e1:2b:66:52:91:cf:3e:63:33:c4:79:3d:
         55:23:3b:b7:c7:79:72:b3:12:79:99:2c:50:c5:d6:c1:a2:31:
         51:11:a8:25:cb:47:6f:9f:d4:f0:a6:c6:23:3a:a6:4a:ba:10:
         a3:74:a6:80:2e:17:8e:2f:c4:a5:31:66:44:53:a8:fa:3e:4d:
         28:99:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:07 2025 by rpki-client