Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa
File:                     354c65b5-a551-3fa2-b7a5-9d39909688c0.roa (raw, json)
Hash identifier:          ner9D617DrjpeI91YRUyuZV/72UrHSfXvxkTVtyEBrg=
Subject key identifier:   1B:6A:93:0F:D1:69:5D:2F:B2:5A:64:DA:4C:54:7A:E9:A0:F1:A5:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481F65264E634C314F0C422600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     35994
IP address blocks:        173.223.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:26:4e:63:4c:31:4f:0c:42:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=e6a0b56a-a442-4c11-820a-3a08cbccd581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:08:1a:84:46:40:5f:20:f0:90:a8:de:33:
                    2f:a9:78:08:3b:41:92:a9:22:64:4f:38:16:06:8f:
                    00:36:12:69:ff:b9:4e:70:8b:1a:19:01:02:8b:09:
                    fa:04:77:22:8c:b8:5e:67:54:30:1f:16:fd:fe:cc:
                    b7:b1:66:a8:32:ae:f8:50:bb:80:32:a0:ec:99:27:
                    23:96:71:13:a7:ba:2b:32:46:d1:78:95:30:8d:55:
                    4f:b4:48:a6:0e:72:28:7e:7a:16:6d:16:4b:91:af:
                    bc:7e:57:03:a5:56:85:24:06:e6:8e:c4:70:b2:92:
                    b4:b1:a5:5c:68:b1:0b:5f:83:2e:04:b4:74:05:d1:
                    16:2b:b7:12:2b:bf:64:24:e5:d8:40:9a:fc:b0:1d:
                    46:85:a2:31:71:39:2e:cb:93:57:e3:52:62:a8:01:
                    55:1e:99:e2:56:72:7e:3e:be:1d:0a:27:14:f9:e5:
                    81:f6:ca:b8:30:bc:5e:31:aa:8e:5c:67:12:06:11:
                    01:d7:29:e5:48:20:4b:5b:70:31:7b:a8:08:31:32:
                    9d:c3:27:af:f5:e2:8f:ea:3f:16:a2:99:b4:c5:68:
                    95:4e:9c:3b:b4:59:db:ba:cd:2c:d0:fd:d2:8c:3d:
                    95:8e:b9:f9:da:46:93:c7:ec:aa:94:fd:c4:1c:de:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:93:0F:D1:69:5D:2F:B2:5A:64:DA:4C:54:7A:E9:A0:F1:A5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:77:78:5a:f8:4a:5b:06:ed:54:31:d3:0c:99:bb:ec:b3:
         f1:3d:2e:92:03:23:e7:92:ed:5e:e1:e8:19:7a:27:27:2f:f6:
         6a:7c:45:4a:ae:7c:be:67:67:fe:0b:e3:24:95:c8:0a:8c:cf:
         84:29:88:8b:90:ec:10:49:d8:d9:7b:f6:20:c8:72:22:b3:f1:
         81:03:68:fd:6a:93:09:fc:43:98:69:20:66:51:58:bb:3d:2e:
         5f:c6:13:29:e6:e4:b2:f5:f8:fc:c7:7e:27:d1:3c:f8:c3:5d:
         04:f5:ee:6b:99:dd:f4:85:57:8c:ad:da:58:ef:12:70:1d:f5:
         e7:2d:8d:d2:3d:7e:b5:d9:d6:bc:64:06:3d:9f:63:60:e9:e3:
         2c:40:7f:d8:33:20:57:3a:4a:f1:0c:1e:42:73:40:33:8c:cc:
         32:82:36:9e:28:ba:54:5c:71:22:18:cf:63:0a:de:ad:a7:d6:
         5d:91:07:1c:01:44:ec:9a:bf:d3:27:1d:e8:17:6d:49:e2:d5:
         4c:2f:88:63:ca:d2:ae:4e:0e:ac:28:7b:5b:f2:1a:e4:7e:6c:
         a0:aa:42:98:de:a7:02:fa:ee:dd:31:ab:92:bf:7b:32:44:88:
         d7:bf:82:eb:96:7d:4f:05:3a:64:09:69:96:8b:eb:9e:23:1e:
         c5:18:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:49 2025 by rpki-client