Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa
File:                     dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa (raw, json)
Hash identifier:          tW7+5U76a3vWf4joARJS5JG2sYyWzh8fVlvuxy7rtck=
Subject key identifier:   20:B6:4A:B4:59:76:1B:0D:4D:2D:72:4B:B3:5A:2B:B6:F2:FA:62:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584835BAA094DEE7C45E4EC0D840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        184.87.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a0:94:de:e7:c4:5e:4e:c0:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=fe6bb4ef-b14c-4959-a2ef-7c8c608c5493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:87:2b:7e:7c:1c:65:ad:5e:97:e0:2e:e8:
                    47:40:0b:e3:fa:e1:2f:24:b7:cb:d8:d9:2c:08:e8:
                    6e:c1:65:8f:8f:8d:65:c1:ec:0e:ee:3c:c5:2b:c4:
                    61:28:59:ce:73:67:8a:41:85:00:bb:2c:50:ea:4c:
                    eb:0b:5b:2d:3e:5c:4b:40:8a:69:01:a8:43:f1:aa:
                    cb:4f:67:f4:24:c0:3c:9a:b0:33:b0:a9:44:34:56:
                    19:be:1b:b1:14:8b:b7:0b:1b:b1:02:48:b0:e1:cb:
                    3f:c4:cf:77:e9:ec:f7:c4:e5:cf:15:6f:2d:e1:c0:
                    16:18:0d:ca:ad:9e:c3:31:4d:de:2e:ef:6d:6e:84:
                    53:87:62:a3:af:45:2d:82:91:72:c6:d9:a0:f3:0f:
                    26:93:3d:4a:e2:21:1c:a2:44:0b:34:33:fe:2c:29:
                    b5:81:88:57:b3:a9:53:3a:00:eb:6a:33:b1:e7:42:
                    7b:43:20:35:15:6b:08:ef:d3:93:0c:3a:50:10:84:
                    d7:2a:62:27:ba:4e:a8:d9:60:18:5c:7e:c2:53:70:
                    b7:b4:7b:4d:c3:2d:04:9d:82:3f:65:60:0e:1e:ba:
                    4c:d7:5b:6d:7e:c4:4e:29:fd:c0:4d:30:b7:ce:9d:
                    57:2a:a6:c6:0c:4f:b6:7e:fd:6b:f5:03:33:c0:5e:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:4A:B4:59:76:1B:0D:4D:2D:72:4B:B3:5A:2B:B6:F2:FA:62:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:05:7b:22:06:07:7f:40:69:9b:b6:28:b0:0e:c6:24:ae:
         eb:20:6c:51:dc:0f:42:c8:90:c9:bb:a3:66:eb:a0:40:c9:f3:
         8e:89:b7:65:6f:6e:69:17:9c:e1:c8:aa:8f:66:64:09:20:ad:
         32:d3:e7:29:2c:63:0d:85:bb:1c:83:d7:27:73:b4:59:f9:5e:
         b2:d2:83:e4:e9:e5:b9:d0:22:28:e8:c4:82:38:0b:04:51:9b:
         cb:25:dd:56:8e:56:0c:f3:70:e0:86:d0:e7:e6:da:c6:19:47:
         53:62:32:eb:48:fd:31:06:69:e8:a5:aa:a8:e7:ca:6f:83:f5:
         09:cb:67:c0:af:c7:2c:48:d1:88:e3:84:00:5a:f3:d3:a9:a7:
         b0:31:10:54:dd:a0:74:fa:d4:bc:26:72:25:9b:e2:dd:c6:ad:
         68:b9:f1:0f:91:12:40:b8:1c:3e:4f:3e:da:4f:dc:21:64:28:
         37:d2:35:bd:0c:fd:4d:28:57:a2:51:18:37:9e:72:6a:70:b3:
         5f:89:c6:21:6c:a5:ce:1e:30:cf:40:18:ab:17:35:84:02:c0:
         c9:cb:81:fd:2a:2c:f7:19:5a:41:34:ab:6a:ab:ef:2c:d7:0c:
         15:f1:87:1e:7d:5c:7c:5d:f1:52:09:74:25:0b:45:ee:32:ef:
         b5:a3:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:40 2025 by rpki-client