Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a36b018-f25c-3a84-aff1-c0585399a10e.roa
File:                     9a36b018-f25c-3a84-aff1-c0585399a10e.roa (raw, json)
Hash identifier:          mVLQalNAl0N/wr7io0nHDE5CKd0n1+UjOs/8oN7FK2w=
Subject key identifier:   E9:40:F0:37:52:85:D3:A1:68:F5:88:2E:C7:0E:F9:C3:79:1B:AB:E9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B51D7CF6BA1065B8B1BC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a36b018-f25c-3a84-aff1-c0585399a10e.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        96.38.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:51:d7:cf:6b:a1:06:5b:8b:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ed5d9337-6e40-463e-a6f2-45c53a09aeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:d1:b1:7d:f9:2f:3b:63:c6:09:e4:88:34:
                    9a:90:c5:7e:3f:84:75:f9:82:99:d8:d0:99:a9:a0:
                    38:af:98:e8:bc:73:d0:8c:40:2c:6d:c4:0d:a2:e7:
                    4c:9f:f8:e4:bb:fe:c7:ae:68:86:97:5e:f6:4b:9e:
                    f9:df:f9:8d:cf:18:dd:c4:c4:62:07:32:19:03:e0:
                    c9:5e:7d:60:d9:42:55:30:07:ab:5b:56:18:fe:3d:
                    c8:09:74:0a:f4:a3:70:bd:b1:74:19:f7:9d:35:1b:
                    79:06:88:69:52:17:5c:8d:fc:57:eb:c6:49:27:a6:
                    88:16:1d:63:7b:b3:10:5c:70:73:be:f6:3b:39:10:
                    cb:36:21:28:ce:5c:78:37:7c:b5:4f:ca:e8:37:8b:
                    20:69:3c:58:fc:a2:99:a8:f1:d5:e4:1c:e7:13:7c:
                    9c:5c:08:88:10:a1:0d:c7:22:73:80:80:b6:d3:be:
                    4d:d1:98:a9:d4:85:8b:7d:dd:59:bd:c7:0d:26:7d:
                    59:d3:db:e6:90:d6:ad:be:77:76:8c:37:e1:3a:ba:
                    a2:b7:03:5a:2f:34:85:f1:50:49:ca:74:07:55:20:
                    53:63:22:1a:ec:b8:a1:28:3b:ce:13:ee:34:d1:f9:
                    0a:d9:79:5e:56:96:66:3c:34:9c:48:b9:e0:31:66:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:40:F0:37:52:85:D3:A1:68:F5:88:2E:C7:0E:F9:C3:79:1B:AB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a36b018-f25c-3a84-aff1-c0585399a10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.38.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:3f:11:bd:67:52:98:52:5d:11:4e:0e:cd:89:0b:5a:0e:9a:
         6e:13:e1:cb:2e:4c:3a:7c:1f:56:30:0e:30:49:0f:9b:70:f9:
         88:75:34:e0:ea:95:e7:33:51:0f:e7:48:fa:7d:ec:73:4a:4e:
         72:2e:cb:ec:17:2b:80:bc:51:f7:54:5e:70:c4:b3:98:2e:df:
         54:53:bc:7a:8b:bd:b0:76:53:7d:15:82:2e:c6:36:30:40:6f:
         c2:0d:c7:15:70:69:69:16:9d:b4:ac:72:8b:42:36:e3:41:8d:
         59:05:18:6d:98:d9:41:b4:69:bd:39:0a:5e:6d:47:0e:10:b5:
         82:52:ba:11:b8:01:4e:6c:19:f8:a8:d3:68:f6:13:c4:25:20:
         32:cc:03:18:c1:3c:64:62:5c:97:1d:fe:fb:d5:a3:bc:41:76:
         1f:27:ec:dd:81:d8:b1:b5:75:3c:f4:3b:6d:5f:c3:89:63:0e:
         69:d8:16:11:f8:7a:fa:6f:01:b0:17:ef:f6:0e:45:17:f4:d4:
         21:94:10:b0:b9:8c:57:f3:3b:9c:dc:e4:17:dd:4a:bc:ac:18:
         a6:ca:e2:16:93:88:cb:f5:b1:86:af:2e:dd:dc:35:1b:dd:4c:
         87:02:f6:d1:a9:4b:f7:3c:09:b5:93:8a:e8:9d:e3:b8:af:69:
         9c:00:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:22:58 2025 by rpki-client