Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76367d05-a84c-3b6b-8fec-9bcec898d734.roa
File:                     76367d05-a84c-3b6b-8fec-9bcec898d734.roa (raw, json)
Hash identifier:          rTluxy1IBYUAga1+MiMXNkl0FtY1503CQve7TBJmY+4=
Subject key identifier:   6E:0E:2A:AE:C6:72:A2:82:C2:11:86:B0:DF:28:61:6E:6A:3E:D2:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848424B14438E6762F5B90E8200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76367d05-a84c-3b6b-8fec-9bcec898d734.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.31.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:14:43:8e:67:62:f5:b9:0e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=4407f15d-4b84-4325-a34d-77ed0346173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:55:76:d4:da:a1:cd:62:c9:eb:7d:08:f2:
                    c8:c4:9c:a7:32:0d:59:36:14:04:0b:63:02:7d:69:
                    a0:4f:e2:e8:f9:82:90:33:69:31:4d:73:ac:04:df:
                    5e:d2:23:1b:ef:02:7f:75:d7:29:a4:dc:b0:2c:61:
                    5f:ce:83:58:37:43:ad:c3:de:75:50:ce:9d:56:09:
                    2d:41:f7:13:28:dc:9c:bb:19:95:86:ab:0d:47:7d:
                    58:ea:5d:70:46:f8:19:54:fe:61:0b:83:93:78:37:
                    be:d9:8f:71:c3:e2:1f:d6:0d:b9:28:cd:00:0e:d0:
                    91:9c:c3:6f:09:51:d0:90:26:0b:59:26:b3:15:c4:
                    44:18:17:4e:4a:48:f9:c1:97:95:b7:5a:d5:81:50:
                    9a:a6:c0:b2:7e:4e:85:8a:a3:32:b5:27:da:e5:8c:
                    65:be:03:e1:f0:fe:5f:9e:b6:0e:c4:a4:81:64:3a:
                    44:3d:64:79:4b:f1:09:bb:0e:ff:5b:75:84:09:93:
                    8f:cb:96:59:ff:78:bc:5e:a9:a4:ab:33:9f:a4:e3:
                    de:1b:33:a3:38:2b:a5:14:03:7f:28:ab:b8:86:39:
                    f1:11:27:5b:0d:11:03:ef:72:60:fd:2f:03:4e:90:
                    49:1b:fd:98:25:74:78:df:68:6b:5a:b9:c8:b4:67:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:2A:AE:C6:72:A2:82:C2:11:86:B0:DF:28:61:6E:6A:3E:D2:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76367d05-a84c-3b6b-8fec-9bcec898d734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:50:e1:ed:c0:73:95:54:50:6f:0d:d4:14:60:3d:6c:35:
         80:d0:a3:3e:5f:a6:e6:81:df:99:e5:eb:34:bb:9a:3f:51:87:
         fb:12:4a:dc:b5:7b:f2:b0:4a:ff:96:6c:2a:41:f4:c8:46:f0:
         9c:6a:1f:52:94:5b:f8:1c:5b:63:8b:b2:e2:05:ea:73:5c:fd:
         d1:ef:25:10:fb:38:3c:c6:b2:59:83:91:c2:bf:ea:6c:91:7d:
         31:ea:e4:a4:cf:73:68:5c:b3:5a:76:3c:0c:26:1d:a9:a0:62:
         e9:9d:96:cb:54:7b:ea:88:ea:a4:51:f8:ac:33:bb:ba:66:98:
         c7:36:f2:81:c1:e8:59:c4:d1:72:78:9a:0a:41:ca:63:92:5f:
         1a:dd:ca:62:43:0e:3a:99:4b:d1:00:88:7d:e9:42:8d:bb:22:
         c2:ba:ec:9f:da:6e:81:ef:81:7d:49:b8:d5:a2:6f:8c:1c:96:
         9d:84:9d:ed:c4:af:b2:c0:25:cd:cd:fe:f7:20:5d:b7:08:a6:
         21:2c:55:d6:9d:bf:3a:4c:38:93:11:df:57:f3:6d:93:be:db:
         bf:ca:58:bd:f6:63:7d:1b:4a:4c:ac:76:37:64:57:04:77:43:
         bc:db:2f:33:a4:9e:4c:45:ea:57:06:69:08:99:3c:08:2e:bb:
         81:37:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:20 2025 by rpki-client