Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
File:                     dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa (raw, json)
Hash identifier:          v/Nfz7JIqOOwZsKyGg5hMiQC89wcf0z6r0ZSvAxV7E4=
Subject key identifier:   42:8B:D6:6C:13:40:9C:89:D1:9F:F1:3E:B9:80:B3:5B:39:4F:B9:FE
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F432858480BDA64D3B2E1B8E4DB010000
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     52347
IP address blocks:        192.34.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:64:d3:b2:e1:b8:e4:db:01:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=9106ed71-eb67-4bcc-b9b8-27f49109409f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ca:fc:20:63:94:a6:b2:14:0c:79:7b:32:72:
                    72:98:6f:6c:d6:fe:ae:89:aa:87:bd:66:9f:31:23:
                    b6:9f:d2:82:a5:8a:d6:81:40:6c:c7:48:b9:f5:9c:
                    93:af:66:77:dc:4f:bd:38:2f:35:df:a4:30:a7:cc:
                    86:ac:c3:6b:55:02:0c:94:90:46:2f:28:7a:7c:17:
                    ce:ad:b9:a7:b8:50:64:b0:87:0b:41:21:bf:41:87:
                    d9:2e:99:15:29:75:00:03:8d:21:15:53:fb:cf:8f:
                    2d:1f:28:36:e6:98:5c:cb:bf:f3:fa:03:bb:35:b4:
                    65:76:4f:e7:6c:2e:9d:04:c6:1c:8a:08:4b:19:fb:
                    bc:c7:ea:9f:31:ba:a5:50:37:d5:21:8e:72:6d:5c:
                    1e:67:e7:68:c6:70:37:54:c7:42:3b:52:fa:1a:fd:
                    35:db:05:24:df:dc:93:63:63:89:79:c7:8d:46:b2:
                    b7:a4:51:fb:75:7d:e7:d3:c1:84:cb:3f:36:25:f3:
                    33:b1:61:f1:1e:e1:09:e8:c6:eb:26:09:94:18:9e:
                    93:f2:49:5d:8c:73:8c:5d:c0:4d:b4:65:33:8d:86:
                    dc:60:c6:cb:be:ca:44:55:57:9f:9e:2e:60:b7:fe:
                    81:8a:43:51:cc:4f:97:98:50:9a:5a:23:3e:f9:68:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:D6:6C:13:40:9C:89:D1:9F:F1:3E:B9:80:B3:5B:39:4F:B9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:65:0e:e7:7e:61:8b:d9:5c:a9:12:ee:fb:c9:35:d8:21:6b:
         86:4d:d6:cc:21:be:87:35:b5:ab:b4:da:35:77:37:4a:ba:01:
         79:90:6c:95:de:26:58:ba:c5:8f:56:66:0e:75:38:c6:d1:50:
         b0:23:a8:25:5d:48:68:ba:4d:06:dc:aa:6b:5a:57:b4:04:34:
         f3:70:09:85:8f:01:1e:5e:c8:45:90:8e:8c:2e:64:78:44:1f:
         fb:fc:fb:79:ab:a4:61:0c:02:28:92:64:de:b8:4c:44:d9:5d:
         b7:f1:0f:8a:29:28:f7:2b:b0:ad:71:50:43:90:8a:cf:d4:74:
         3c:13:da:a1:2a:e2:0b:4e:bb:b9:cb:ce:4b:58:e5:30:a0:74:
         cb:dd:c6:a3:c6:1f:7b:76:88:f1:92:d8:c9:e6:b6:ba:c4:ae:
         8a:fa:1a:b3:1d:48:86:9b:09:6c:b6:0d:f8:30:8e:ed:d9:b8:
         39:02:f1:72:1f:13:67:77:c4:37:ba:e2:26:63:e6:34:b2:16:
         34:51:b8:98:4c:6c:fc:64:dd:8f:83:f6:24:39:ef:af:8b:e0:
         fd:d9:d8:f4:42:26:da:a3:61:08:a6:e9:b0:a5:ac:11:c8:d9:
         83:af:9f:98:ff:3d:a6:e2:91:bc:6f:f4:cd:62:9d:2b:96:8f:
         ff:ca:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:05 2025 by rpki-client