Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7453dd-2b71-3bda-bf0f-c21f6b086d42.roa
File:                     cb7453dd-2b71-3bda-bf0f-c21f6b086d42.roa (raw, json)
Hash identifier:          uUGTs7xu9NUIUpVCU5sJA9MkCfvAwnpHTHvNVc0kVLA=
Subject key identifier:   2F:1E:81:74:67:77:42:5C:1F:0A:5A:26:C8:E9:A6:FD:74:63:B2:81
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848222FEF921FEBEB2885648E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7453dd-2b71-3bda-bf0f-c21f6b086d42.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     20940
IP address blocks:        96.7.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ef:92:1f:eb:eb:28:85:64:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=d06f3c90-c9f6-4f23-ba77-d0b187632a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:e6:22:28:b6:81:f6:8a:5a:c5:40:85:0a:
                    d4:37:73:9f:fc:3f:93:50:da:cd:7a:de:63:c8:45:
                    c2:8f:e8:e8:37:1e:c5:83:45:12:a9:59:49:fb:d3:
                    22:65:c5:7d:0a:88:d5:c0:67:7d:95:2d:4e:b9:d0:
                    84:c0:b8:f3:5e:52:0c:be:09:ca:ad:ab:96:c5:2c:
                    be:3a:e5:c3:ee:93:fd:31:e2:fd:55:da:a0:81:a5:
                    6a:bc:3c:88:8f:ce:6c:7f:82:af:56:5e:12:29:4e:
                    22:3e:c9:ed:22:4b:07:ca:55:f1:7b:ea:11:6b:ea:
                    25:b9:d1:be:68:ab:06:b3:9a:56:8a:bf:81:50:28:
                    2c:5c:aa:15:51:c6:c1:29:3e:fa:a7:18:92:b5:98:
                    dd:a6:b3:b7:d5:9b:66:5d:bd:ce:ef:54:be:cf:6b:
                    de:74:d3:a5:f2:2c:d0:74:b4:e5:b0:bd:5f:ff:33:
                    97:a8:7d:92:01:14:40:dc:2e:fe:d5:70:57:84:3e:
                    1b:ed:c9:4a:87:77:fb:a9:7b:f1:d9:90:2e:90:6c:
                    f3:2e:44:f6:d4:da:29:b9:5a:d4:07:49:dd:c7:69:
                    95:54:a9:bc:6d:67:24:9a:90:90:cf:d5:31:1f:1a:
                    59:f2:b5:d5:e3:5d:8f:d4:8a:6e:b6:b2:ae:24:ca:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:81:74:67:77:42:5C:1F:0A:5A:26:C8:E9:A6:FD:74:63:B2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7453dd-2b71-3bda-bf0f-c21f6b086d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:9f:11:4a:ae:64:89:d3:4a:34:01:7a:ad:bf:f6:2f:ae:
         b5:e5:ed:47:81:2f:c6:87:0e:a9:cf:d2:12:ae:7d:31:e7:24:
         30:6c:cb:16:51:4e:3d:a0:8d:9b:0e:92:f6:cc:88:8e:f3:29:
         1c:8e:e4:48:d5:8c:d6:cf:d0:6c:20:88:3d:70:86:49:b8:44:
         84:cb:c4:de:c1:0e:fc:95:fe:d5:a1:78:13:6d:20:e7:a9:0d:
         a3:5f:83:0a:f7:72:dd:c4:69:62:ac:d0:1b:d7:a6:d9:76:58:
         0c:44:23:c7:e4:40:b5:fe:62:0e:02:8f:c0:69:25:8e:42:10:
         2f:bc:98:d4:5a:60:ca:78:8f:af:d5:b9:0c:64:c8:1e:6b:2e:
         70:ac:0a:7c:28:d6:e7:f2:e4:70:3d:d1:bb:0b:f2:55:d8:c3:
         72:74:5f:a0:2f:58:17:3a:49:8f:77:ea:1c:eb:6f:22:56:12:
         ef:3c:e7:eb:d3:d0:0b:24:d8:1c:8e:2e:c8:52:a4:47:a3:93:
         11:d0:96:eb:11:fa:45:ba:c7:fd:2d:2b:dd:5d:a5:fc:3b:de:
         ce:cf:c9:35:8a:87:4c:9b:ae:f6:27:dd:10:65:d2:fd:fc:46:
         e4:45:99:56:a7:1c:88:1d:a2:25:4d:d8:02:3e:83:c1:53:13:
         b3:5d:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:23 2025 by rpki-client