Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808f419d-1949-38e3-a11b-c980e225761b.roa
File:                     808f419d-1949-38e3-a11b-c980e225761b.roa (raw, json)
Hash identifier:          w/GpMkVAGbJzi6OVy4KgojcnL843/+GiK94x/WCAIEs=
Subject key identifier:   65:A1:AD:69:86:4D:AC:FC:98:6A:81:07:54:DE:14:28:9E:71:F6:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848318AB08B247C519CB389891B
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808f419d-1949-38e3-a11b-c980e225761b.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     20940
IP address blocks:        173.223.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:b0:8b:24:7c:51:9c:b3:89:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=87082f7c-bfe4-404f-9837-c79605a75f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:62:fe:1e:45:1d:e9:29:68:45:72:bc:b5:
                    1b:d5:cf:97:d0:f1:43:ce:8d:4c:1b:83:39:e0:ba:
                    b1:d5:b5:c9:ee:52:50:c3:3a:38:de:b3:b9:aa:24:
                    83:f2:be:62:f0:31:07:12:16:89:92:8b:b1:c6:59:
                    66:53:a2:09:ac:9f:29:1b:92:ca:17:bb:0e:a6:1b:
                    50:a2:bd:94:19:39:d3:0c:7f:8b:c0:47:e3:fa:d1:
                    2b:d4:cf:3b:ad:36:dd:4d:a3:f1:31:a4:98:02:9e:
                    63:d0:74:79:dd:d8:eb:31:77:3e:dc:11:ef:98:79:
                    eb:a7:d9:8b:6c:a7:c7:06:db:9f:42:44:b4:b2:7d:
                    22:bd:c0:2d:46:5f:de:12:17:da:04:cf:92:ee:bb:
                    9a:59:a1:9d:1b:01:f9:14:9f:27:0b:23:a2:d4:8b:
                    e5:49:5b:54:96:86:ac:bb:ee:c5:a1:bc:57:4f:77:
                    71:08:c8:59:b0:2e:cd:e8:82:91:48:12:74:e8:20:
                    f1:15:56:4e:ed:6b:f9:ac:19:b1:44:7a:4e:2f:e6:
                    02:17:2b:d8:e4:bd:1a:a7:be:fb:c3:79:90:3a:cd:
                    9c:06:d4:e7:2e:aa:ac:d9:b1:44:6b:10:b0:06:45:
                    59:4c:c4:74:bd:dd:15:d6:1f:04:ed:67:6d:14:9c:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:AD:69:86:4D:AC:FC:98:6A:81:07:54:DE:14:28:9E:71:F6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808f419d-1949-38e3-a11b-c980e225761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:de:96:81:10:56:30:68:5f:f0:c6:27:d7:70:7b:f0:e2:
         99:ab:fd:5c:7b:8f:39:92:22:91:cc:bd:e9:d9:ac:ec:10:d0:
         cd:a5:35:94:1f:de:e2:34:6e:1d:00:41:f6:43:af:bd:f0:25:
         01:ce:67:f4:40:e3:90:14:42:fb:ad:83:e5:99:8c:14:69:48:
         74:df:7f:a5:a1:44:0d:27:83:19:4e:e1:90:ae:b1:2c:3e:b5:
         6c:b6:39:2b:38:f9:97:aa:8d:5e:92:8b:44:a7:7b:cf:1b:04:
         68:3c:f6:8b:0b:4c:12:da:24:7c:db:0e:6a:28:49:65:18:88:
         bd:bd:4a:c6:88:b8:85:d6:21:4f:69:b0:d8:64:d9:8f:94:58:
         dc:1c:9f:b2:6c:f3:70:9e:57:a9:52:df:27:ab:90:26:b7:5d:
         97:1e:6e:a0:e9:6e:f6:cb:ca:0f:80:2b:e8:6f:c7:83:d6:ab:
         f8:7b:e5:db:09:0d:ca:42:fe:d0:12:60:07:7e:5d:59:4f:05:
         49:e8:f6:1b:b6:36:9b:17:b5:93:be:09:74:54:65:74:e6:7c:
         a9:c3:87:c4:4c:38:6e:a9:a5:58:01:c7:90:84:a1:0d:50:fe:
         1c:15:6c:a2:db:bd:5c:e8:d1:73:cb:e9:5e:07:19:69:4b:8c:
         4d:d5:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:07 2025 by rpki-client