Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d37f6a5-9e09-350c-b91d-34ff0b1922b3.roa
File:                     0d37f6a5-9e09-350c-b91d-34ff0b1922b3.roa (raw, json)
Hash identifier:          K8HG90J26LtPFFMmEq5lrXiSUPH/BrEaR3MzWEcHbng=
Subject key identifier:   62:48:1E:C6:3D:80:1B:16:C9:B9:05:1C:75:97:57:6C:05:99:AC:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584815A002B33C47575F85861E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d37f6a5-9e09-350c-b91d-34ff0b1922b3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     36183
IP address blocks:        172.224.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:a0:02:b3:3c:47:57:5f:85:86:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=8113a7a5-7e36-46ad-9fe2-933cf7772e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:d1:c9:4e:3f:03:ac:19:0c:e0:98:81:81:
                    91:6c:d4:72:b1:62:cf:cb:c6:52:1d:87:70:cb:59:
                    9a:8a:bf:e4:33:f3:67:50:9e:26:21:01:8b:3a:60:
                    f9:b7:42:9c:18:e6:f5:ba:e9:75:c5:f8:53:9d:a0:
                    81:c4:09:85:99:63:5b:e8:a8:3a:b0:7e:a7:f5:26:
                    84:72:b7:00:55:e5:04:f0:04:a7:06:07:98:02:0e:
                    5c:5c:e9:5f:0f:f5:e1:c5:26:29:5d:c6:fd:20:30:
                    39:28:ca:c1:7c:17:c5:43:ab:d6:01:bc:11:83:71:
                    6d:7f:04:15:12:da:fe:15:9e:4c:56:12:00:87:ed:
                    41:05:8d:25:63:d4:88:d8:e5:68:11:d6:d3:a5:fe:
                    f4:47:a5:ed:f3:fc:3a:8b:6c:03:64:c3:dd:36:d3:
                    87:94:0b:59:85:d9:f3:d9:f2:d4:bb:bf:ad:ca:e0:
                    c8:63:3b:86:ba:8b:c1:c3:a1:18:9b:55:b4:ee:8f:
                    94:14:9e:77:82:9a:eb:6e:d8:78:7d:f3:62:0a:71:
                    92:fa:60:f9:35:50:64:73:39:3d:ad:20:55:b7:ec:
                    9b:85:13:41:01:9b:2b:e4:39:5b:22:0e:d4:80:8c:
                    c4:bd:6c:6a:7d:c9:6b:f5:3a:5a:d4:f5:1c:2f:7a:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:1E:C6:3D:80:1B:16:C9:B9:05:1C:75:97:57:6C:05:99:AC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d37f6a5-9e09-350c-b91d-34ff0b1922b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:df:98:9a:47:c8:68:d3:1d:11:9e:f7:03:8f:04:38:9a:
         af:84:cb:a0:c5:2b:2c:32:ff:4b:81:ed:5a:db:41:80:46:87:
         a8:cf:ab:58:a7:c4:48:c2:ad:b1:13:5b:28:85:a6:62:b2:4d:
         5b:36:fa:36:33:e4:98:1b:f9:e6:19:03:18:95:a7:a6:e8:df:
         02:32:5b:28:1f:72:3c:0f:47:64:55:f8:d8:11:c0:2c:83:eb:
         54:63:c0:2b:6e:0c:06:87:10:48:7c:fc:98:72:70:6b:44:fd:
         ec:f2:3d:8e:3e:c4:db:c0:13:01:32:c2:14:50:7a:ff:d4:43:
         2a:02:b0:43:bf:f5:58:11:82:ae:38:48:c5:2f:83:12:47:6b:
         50:81:dd:14:5d:bc:8c:66:fa:a7:68:7c:4a:31:82:3f:b8:a6:
         30:b6:10:ef:c9:b9:8b:3b:65:56:a3:5c:6f:de:af:37:34:00:
         a6:93:e2:b9:a2:bd:0b:4c:bb:fa:33:0b:61:3c:c2:53:e8:3c:
         e5:6e:da:da:f6:52:4b:ec:44:dc:e1:e4:52:59:3a:db:63:54:
         85:17:5f:b9:34:5d:cf:3b:d7:9b:31:e1:5d:2d:fd:6f:2d:10:
         f5:91:bb:1d:7f:b8:9b:46:82:a8:46:2e:6a:05:a9:ad:ad:20:
         96:e7:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:45 2025 by rpki-client