Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa
File:                     07d6f9ec-97f8-302c-9496-b5c1454138f7.roa (raw, json)
Hash identifier:          b2qcq1Y05mSu6aoZzLdVhYGSyH+cgqffg1LWV7JDusQ=
Subject key identifier:   9D:4D:D2:1F:7D:7E:86:CD:6A:B8:83:E3:08:E7:83:79:C5:DB:47:44
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858480EA51F41F411363948DC0860
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     36183
IP address blocks:        172.226.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:1f:41:f4:11:36:39:48:dc:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=b2d06d36-a23d-4563-be60-b5d9f7089ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:ca:5d:5d:4b:71:aa:e2:9c:09:31:9a:ce:
                    eb:73:3b:32:ce:ca:f4:f0:1b:4c:9c:b6:02:00:c7:
                    8b:d7:32:e2:af:0c:53:ff:ec:54:e6:c2:46:f9:64:
                    ee:03:b5:81:f3:31:9c:9e:86:8a:e3:6a:a9:49:04:
                    df:bc:d7:dd:84:e9:1f:8a:b8:96:2e:16:50:16:a2:
                    63:f3:cd:a7:6b:20:6a:cd:ed:0a:cf:56:c8:70:8f:
                    02:3e:23:f6:30:d6:22:ab:eb:af:0c:c7:1c:cd:b8:
                    17:c8:c8:ac:ab:c8:d5:bf:75:7a:f5:63:9d:8c:ab:
                    c3:53:8c:d3:c1:5e:90:10:c4:ac:ea:8f:ca:fa:3d:
                    1b:65:25:f1:3c:4f:32:cc:af:d8:10:8e:c5:1c:b6:
                    73:71:4c:69:78:b8:6e:53:03:ec:23:32:98:b6:ef:
                    71:f0:37:f9:be:18:a6:31:87:72:3f:d1:78:a8:27:
                    9f:f4:d1:22:b7:92:dc:8a:a2:b4:04:77:99:fd:55:
                    ea:e3:cb:ea:28:a0:e3:a7:98:d2:e1:53:3d:3e:09:
                    ab:70:5c:9d:c2:4a:9e:c3:e7:61:02:30:ba:29:f3:
                    01:3e:69:03:9f:80:05:4b:07:26:bb:25:01:44:74:
                    cf:2a:2b:bb:79:f7:dd:38:c3:1f:02:1f:51:a9:1a:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:D2:1F:7D:7E:86:CD:6A:B8:83:E3:08:E7:83:79:C5:DB:47:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:bb:be:c9:b7:59:4f:c0:18:c6:0b:05:2c:73:12:0f:62:
         e3:47:d7:52:79:0f:71:b7:56:c1:ad:72:f0:d4:e9:61:ed:d0:
         83:9a:a0:45:8f:55:8d:65:24:c0:14:b8:ad:4a:f0:ed:00:41:
         e1:0a:c5:c5:0e:69:62:0c:b6:95:58:35:9e:8e:93:c6:a6:a7:
         5c:5d:8b:6a:0d:9c:7c:97:84:a5:9c:77:f1:a4:b7:b6:2e:4a:
         73:be:1b:0a:db:30:54:85:48:8b:22:1f:73:13:ef:6f:53:9d:
         ec:34:38:3d:9b:a1:13:46:0e:3f:bb:af:2e:db:8c:de:2c:97:
         03:40:e4:d3:47:5b:c9:b4:9e:ce:c4:e2:b4:38:7d:a1:27:a8:
         ba:b0:bd:7a:2d:21:a6:fb:e7:e1:17:22:7b:6d:46:bf:5c:91:
         2a:9d:7d:5f:76:06:9d:0d:95:07:91:02:44:f8:31:5e:fe:80:
         2c:59:a8:18:e3:fa:0c:01:fd:16:ee:49:84:d4:24:b1:76:15:
         e2:7f:55:22:99:f4:6f:24:6f:66:d1:de:56:68:13:a0:84:21:
         70:3a:a8:cd:d6:50:9d:8d:a3:b7:e5:0c:8f:46:10:d5:5e:66:
         64:87:7c:72:d1:01:58:1a:f0:35:1d:4f:12:98:58:fb:9f:ae:
         4e:f2:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:24 2025 by rpki-client