Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa
File:                     b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa (raw, json)
Hash identifier:          1qqpbW9nr3F1vY9UCasgn7r6lxMKxOiPU8M46oae9cM=
Subject key identifier:   16:C3:10:2C:F5:AE:94:C1:03:08:84:66:89:79:F1:12:5A:87:8A:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848424AF996ACC7B05C2395C9C7
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.28.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:f9:96:ac:c7:b0:5c:23:95:c9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=a5b16066-414c-477f-801c-b560800547b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:5a:9c:e4:b8:3a:bb:8e:25:94:f7:59:5c:
                    98:5d:9d:3d:ec:e0:ad:a0:a6:90:5e:98:a4:2b:f0:
                    c1:c4:a0:31:7f:86:7a:3b:7e:bb:06:b2:23:26:08:
                    da:69:fa:b2:07:50:41:28:19:c2:7b:c4:75:61:60:
                    ec:ce:1a:32:aa:cb:aa:1a:12:3c:0f:1f:e8:ed:d3:
                    eb:ff:1b:cf:6a:f7:ff:8b:dd:9f:fe:c3:0a:3d:96:
                    6f:41:da:f8:89:72:47:fd:79:fe:43:c7:70:5b:b2:
                    7c:e4:25:e3:c4:b3:52:38:dc:62:fd:a5:96:db:7f:
                    25:0c:49:0e:b6:24:81:d2:f7:7e:2e:c9:6e:25:19:
                    c4:cb:f4:9c:78:a0:b3:8e:7f:da:45:d3:61:74:67:
                    1c:f5:70:f3:61:ef:d0:81:6a:41:8c:e8:d2:a5:52:
                    31:97:fc:aa:02:34:40:69:cc:21:9c:d6:ce:3e:8a:
                    ab:60:52:ef:4c:48:62:f9:69:96:aa:fd:64:9f:5c:
                    e9:f8:32:06:7f:76:3d:09:4e:a3:0e:f4:04:40:3d:
                    15:d9:f0:a7:0f:4a:87:4b:4b:9f:41:d3:18:6b:1d:
                    7c:d2:d5:1c:9a:71:91:0a:73:65:6d:11:7b:d8:5f:
                    bb:59:6c:3f:ab:e2:f5:eb:65:32:a6:c9:4f:c5:f5:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:10:2C:F5:AE:94:C1:03:08:84:66:89:79:F1:12:5A:87:8A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:55:e5:d8:6a:12:ce:7f:f8:01:68:10:39:ea:f6:df:60:
         13:23:a6:42:49:49:cc:ee:3e:2b:47:99:0b:63:ce:02:de:0e:
         ff:46:14:67:7d:45:79:0a:ea:e3:ad:b0:00:db:12:0a:4c:4a:
         c3:c8:53:81:a8:9b:b3:51:87:a9:1e:6c:6c:9e:8e:ce:1d:ad:
         76:09:59:23:a5:68:b6:e8:ec:67:86:a6:91:ec:10:4b:cb:f3:
         1d:5c:63:b6:e2:a0:36:15:0b:fc:d1:df:81:2e:ca:44:3e:1e:
         04:e2:6c:56:9f:ab:e8:8a:80:e7:99:ec:52:a5:6b:b6:d0:54:
         cf:68:57:f1:ad:11:6e:f2:4e:b0:84:df:6f:7c:c9:15:44:89:
         83:c9:5c:83:2f:77:3d:ef:98:af:db:bc:df:90:6b:16:77:a1:
         c0:3f:a6:cf:b0:08:9c:50:13:2f:89:38:7c:f5:c7:53:87:e5:
         dd:5d:f8:68:12:e9:62:71:28:26:b3:dc:7c:6e:bc:f4:7f:98:
         48:b4:de:94:0f:1a:5b:b0:be:41:79:41:22:d7:6a:6b:69:e6:
         f0:d9:ac:2f:1b:24:1c:bd:90:9c:f5:f5:6a:7b:9c:ce:95:58:
         5d:02:bd:2d:85:b9:3c:9a:13:8d:d8:af:71:23:33:29:3a:d1:
         59:30:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:26 2025 by rpki-client