Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cfd787d-4cc2-3519-bcb5-c71072f9c7bc.roa
File:                     9cfd787d-4cc2-3519-bcb5-c71072f9c7bc.roa (raw, json)
Hash identifier:          SnN/7jYvGpoCq35xoUOQX2cD9YlEZkmr8f7rAIZ+x8c=
Subject key identifier:   71:6B:4D:12:8E:54:D9:78:D8:33:8A:2C:CA:AA:38:0F:79:4E:5F:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848388562CF30AEE6C67218BF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cfd787d-4cc2-3519-bcb5-c71072f9c7bc.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        184.29.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:62:cf:30:ae:e6:c6:72:18:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=f8fbddc0-860e-4899-9d66-065cdd7d4040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:5b:b8:8c:c7:f3:76:e3:6a:03:b1:98:64:
                    5b:77:d4:0e:ff:d2:77:d2:f3:ca:99:77:05:fd:99:
                    a7:07:1a:f3:bf:18:f5:b4:c4:4a:08:cd:aa:de:c6:
                    16:55:43:9d:8e:05:44:94:dc:d4:22:b1:08:85:71:
                    bc:f9:1c:ae:a1:48:c0:fa:b1:9a:37:d6:d1:5f:5d:
                    95:8d:ec:e2:f5:0b:cf:21:56:f5:4c:d5:53:a6:3c:
                    c1:1c:6a:9a:0d:20:b5:16:f0:02:5c:9f:26:5f:c5:
                    4e:3b:c8:42:38:34:90:b6:b5:eb:9c:a6:15:70:cf:
                    01:f2:69:cc:9d:fd:70:de:d7:73:2b:0c:2f:34:bd:
                    9a:08:89:a8:d2:78:af:f1:96:38:cc:aa:25:8a:cd:
                    37:75:cd:18:2e:6c:9b:73:08:fc:69:54:39:6e:16:
                    35:a9:18:c6:4d:23:e7:55:71:a8:9a:1f:f7:86:09:
                    1f:a6:cf:f2:89:15:5f:59:28:b7:0c:46:69:36:00:
                    2e:07:0e:b2:03:f6:b6:9a:26:8c:1a:8b:0d:b4:93:
                    8f:4d:b1:78:66:83:86:47:f5:b0:06:de:a6:0a:56:
                    20:9e:16:4b:5f:dc:b7:c1:c8:0b:3e:e9:2a:1b:15:
                    e6:a4:b3:53:1a:44:2a:35:cb:9a:10:e6:5e:66:0e:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6B:4D:12:8E:54:D9:78:D8:33:8A:2C:CA:AA:38:0F:79:4E:5F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cfd787d-4cc2-3519-bcb5-c71072f9c7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:62:8a:62:6b:d5:75:bf:ce:99:b3:4d:80:7b:ef:a6:94:
         9c:ca:96:d4:d1:3b:47:75:aa:84:15:5f:2f:f7:57:29:92:f0:
         ed:46:65:66:0c:b6:fe:67:79:55:3e:08:d0:e4:c2:f7:1a:38:
         14:82:1c:cf:e6:c1:be:a9:89:41:17:e4:1c:b8:40:5b:2b:47:
         a7:be:3a:3f:6c:72:76:d3:1c:d4:1e:ac:b1:f7:9e:71:58:8c:
         3e:ca:ea:1c:f4:9e:5d:ba:bc:e9:76:80:a4:2e:9d:93:57:30:
         61:c9:51:66:30:ca:40:fd:04:3a:9c:e7:fb:64:ce:7a:db:0e:
         d3:2d:1d:62:56:20:f6:86:b1:3a:fe:6d:eb:de:cd:ed:72:ed:
         71:fa:77:8e:e4:a9:39:d6:f6:31:e0:6e:1d:73:64:6c:84:f3:
         dc:41:3e:24:4b:68:c5:82:65:d1:1a:32:a3:9b:5e:46:f4:37:
         be:43:8b:3e:3a:8d:df:b2:70:41:61:66:6a:45:2d:5f:99:a0:
         b4:98:ad:ab:f7:de:0a:bb:a8:3f:f9:2a:32:6e:4d:cb:f1:7a:
         5f:f8:4b:69:32:a2:4e:c6:7e:0c:82:a2:25:12:90:b6:0d:8e:
         31:ca:55:f1:a5:41:64:da:e0:73:44:9d:f6:86:19:fa:e7:c2:
         2f:44:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:12 2025 by rpki-client