Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eec717d-3b7e-352e-a32d-0c7fcd40f203.roa
File:                     1eec717d-3b7e-352e-a32d-0c7fcd40f203.roa (raw, json)
Hash identifier:          gP82eUEj66AOW6VtfvRSPAVFQDdfzyD5fAWHnwgItQc=
Subject key identifier:   5A:72:1A:00:D3:BB:94:0B:AD:67:FC:97:96:90:93:66:EA:74:D4:9F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858482BF57009FFDC9899C744FF68
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eec717d-3b7e-352e-a32d-0c7fcd40f203.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        96.16.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:70:09:ff:dc:98:99:c7:44:ff:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=f4636b94-4e06-408d-af2c-af22fb2afcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:85:18:40:ca:91:52:cc:39:79:aa:03:da:
                    9b:e5:ae:36:2d:24:73:e4:7a:ea:18:ac:ce:10:04:
                    7e:ed:44:90:d2:74:6e:ea:51:71:26:69:19:1b:84:
                    6b:49:50:5f:5b:65:4b:ed:23:ee:17:ef:88:08:08:
                    15:ce:87:9f:8f:f1:4c:60:d0:ed:e0:f2:2a:02:54:
                    de:7b:5c:dd:b5:26:fe:07:ee:cf:a9:e2:3d:16:5b:
                    cf:3c:a0:f5:37:ec:e1:63:b5:d1:d5:5c:9e:ab:c6:
                    15:32:2c:80:b5:64:5b:6b:a5:78:92:9d:a1:12:6d:
                    c3:df:a2:cf:eb:ac:b9:48:f7:b4:73:a6:c1:b0:ff:
                    f3:6e:9b:99:69:8a:15:bd:63:0c:8b:16:5c:02:b1:
                    be:7e:3c:6a:1c:4e:76:29:90:38:ea:b8:36:22:0f:
                    e6:a5:cb:44:28:e0:95:99:23:93:5e:a8:38:65:dd:
                    bc:88:e4:47:c6:1b:6c:b5:98:4b:a9:81:96:5e:0e:
                    10:9c:c2:ee:98:43:24:4b:33:a5:af:5c:52:bd:0b:
                    7a:ad:97:c0:c7:f6:2e:45:ce:4e:42:e9:2c:ec:64:
                    d6:18:79:ee:0c:38:b4:9c:e0:ea:6e:c7:cb:0a:9a:
                    8b:4d:9d:00:fc:e0:22:c6:bb:94:56:23:18:11:5a:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:72:1A:00:D3:BB:94:0B:AD:67:FC:97:96:90:93:66:EA:74:D4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eec717d-3b7e-352e-a32d-0c7fcd40f203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:85:49:ef:75:9a:f7:dc:24:20:23:30:75:fa:45:4b:1b:
         4a:a6:be:f2:0e:c0:dc:27:fe:10:88:3a:b6:85:0e:76:20:43:
         1e:4e:82:3d:80:19:5a:44:e7:2c:89:29:ff:10:42:b7:5f:89:
         24:45:38:e4:42:6e:41:a0:45:55:b1:fa:03:21:7c:dd:36:ca:
         a8:1e:01:5c:12:e6:98:64:65:f4:13:ba:38:3c:01:2e:c7:f5:
         51:85:0c:ce:f9:09:4f:db:e4:32:4a:a4:44:a9:1a:f6:99:68:
         20:80:53:dc:ed:12:f9:f1:23:df:56:03:ec:08:ac:6e:f1:bb:
         a3:ac:08:c3:db:86:f3:01:22:51:8c:9a:b7:5d:43:e2:c7:c3:
         95:b0:87:df:5c:5e:89:65:90:17:59:51:b6:d2:2d:72:5a:b9:
         98:dd:56:95:0a:d3:2d:91:9b:58:d6:db:4d:be:fc:0d:78:a8:
         19:43:87:d6:be:e1:8e:cb:9f:e4:14:0a:59:a8:a2:c8:69:4b:
         6a:6d:02:f7:9d:1b:45:cd:d2:ec:54:70:3d:1e:1f:7d:63:6b:
         64:4a:c8:ec:31:31:cd:73:aa:d2:b3:0a:f9:d2:72:a4:04:09:
         b4:fe:6d:cb:61:9d:7b:4d:ab:9e:16:88:4f:f5:06:de:85:d0:
         f5:ea:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:14 2025 by rpki-client