Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f997090-dc4c-3ce6-935b-ee75f2c52607.roa
File:                     4f997090-dc4c-3ce6-935b-ee75f2c52607.roa (raw, json)
Hash identifier:          oTRiNlixFIndLKK5NgDxOL2gm2WrLW60b+ozhhXYHP0=
Subject key identifier:   61:F0:D8:EB:E8:E4:18:AA:57:2D:34:DD:EF:A2:5B:07:E3:5D:AD:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584840E5BEB2BDCD29EC51BAF980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f997090-dc4c-3ce6-935b-ee75f2c52607.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        184.25.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:be:b2:bd:cd:29:ec:51:ba:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=57657158-0501-4ea3-9c7f-c6f766489b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:c3:8a:44:f9:e2:e4:65:4d:09:aa:08:3f:
                    6d:01:50:bd:38:ee:a1:39:0a:4f:6f:7e:bd:d3:57:
                    c2:2b:0c:6b:08:48:37:1c:b1:64:31:8e:49:26:31:
                    8e:d1:21:ef:4d:16:08:4a:db:37:67:48:af:da:ec:
                    b5:d3:a2:e1:28:f9:f6:87:b0:84:36:d2:c8:fa:d9:
                    41:af:23:f8:98:13:cc:ed:8c:0c:76:49:7d:6c:26:
                    e5:56:05:46:07:ca:fe:09:0a:b7:f1:4c:bd:1f:35:
                    bd:94:93:03:33:21:25:b1:f9:f1:0a:1b:a6:28:48:
                    06:9b:64:33:bf:05:bf:9a:2f:e3:00:17:ff:f3:4c:
                    43:2f:3d:c0:11:bf:9e:b9:e5:64:53:a3:ac:c4:8d:
                    72:c4:12:34:4c:3b:5b:17:9c:a8:a7:ac:09:de:8b:
                    81:e4:48:3b:dd:eb:59:4d:74:00:d5:4a:da:9f:02:
                    1b:6b:d5:d7:81:d0:34:3d:d2:3d:3e:68:37:64:4e:
                    2b:9f:3e:99:af:5d:a1:a5:b7:5b:c5:b5:57:3f:f1:
                    e7:e1:ed:5b:eb:67:bf:56:ca:6a:c2:ee:f7:2e:78:
                    bd:9a:e9:cd:79:89:b8:48:6d:f7:08:f0:9a:82:04:
                    44:1c:82:aa:48:d3:a2:a3:07:9b:95:be:f7:39:25:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:D8:EB:E8:E4:18:AA:57:2D:34:DD:EF:A2:5B:07:E3:5D:AD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f997090-dc4c-3ce6-935b-ee75f2c52607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:ad:84:c3:23:7c:9c:ed:58:56:26:c0:30:dc:51:6c:98:
         61:44:35:68:af:fc:79:4d:c6:48:9e:0a:d8:2f:95:3b:11:05:
         66:06:5b:16:5a:a7:05:ad:fa:c2:db:8b:81:97:be:d6:5c:19:
         b0:ca:e2:ad:df:ad:ce:e3:19:f5:91:3b:c4:22:2c:aa:5e:cb:
         3b:e1:87:07:14:c6:20:fe:3e:03:cf:09:7e:c3:0f:40:e2:ef:
         c1:9f:8b:56:5e:92:05:91:d0:c0:c2:b2:6f:6f:2a:57:71:c9:
         3f:93:b3:ee:0f:2c:50:8f:13:84:50:50:da:61:4c:54:a3:1a:
         c2:57:fe:c6:b8:31:cd:c2:10:92:00:05:4c:9d:fc:c6:43:ac:
         7e:40:46:02:4f:89:4c:4f:e9:b7:58:26:5d:03:f4:ce:b1:cf:
         f7:68:70:00:d4:36:cc:06:db:1c:de:97:b8:fb:22:08:ef:51:
         4f:cb:1b:0a:09:6b:50:c7:f3:44:38:15:1e:1d:d6:cf:d6:2d:
         b2:57:2a:09:84:29:65:af:c4:04:1a:2a:42:04:f8:1a:ff:47:
         08:02:de:43:f6:87:1a:f2:d3:9a:d9:4d:ab:32:ce:1c:51:db:
         6b:9c:19:cb:aa:f9:fb:7f:1b:85:53:78:c7:24:15:5e:ef:2e:
         b2:ec:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:28 2025 by rpki-client