Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa
File:                     b358fd28-78e4-32fd-8779-c6ee2c15a485.roa (raw, json)
Hash identifier:          S3MA+YS7ZwjkVJqjJj7Wq7qvZbCInxAz6I9doOFzSjY=
Subject key identifier:   B9:AD:12:79:6D:58:DC:88:C1:F0:6C:0D:A4:9E:2E:BC:7C:FA:0C:16
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847DDE92CF6C39F01A9486CF480
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa
Signing time:             Wed 13 Nov 2024 15:03:25 +0000
ROA not before:           Wed 13 Nov 2024 15:03:25 +0000
ROA not after:            Tue 11 Feb 2025 15:03:25 +0000
asID:                     1239
IP address blocks:        67.159.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:e9:2c:f6:c3:9f:01:a9:48:6c:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov 13 15:03:25 2024 GMT
            Not After : Feb 11 15:03:25 2025 GMT
        Subject: CN=61fa3456-1389-4de9-ba65-a4ac1c2dc9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:50:62:85:fe:3a:b1:36:f9:0c:19:42:db:
                    fd:e6:fb:8b:2b:d1:e9:f6:bc:14:7a:d4:51:60:0f:
                    59:56:f1:80:6d:2d:a1:81:85:0b:61:af:94:01:8f:
                    76:9b:9e:b5:e4:15:bd:d1:cd:f1:9f:fc:3a:c2:ea:
                    28:23:e7:d9:e3:9f:1d:8e:9c:31:b4:63:87:1d:43:
                    92:78:0d:4a:35:28:83:3e:bd:66:75:61:c3:24:18:
                    1e:c7:4f:82:46:cc:36:0e:4d:78:97:c0:b0:3f:e1:
                    18:45:01:c1:23:c1:5c:81:a1:96:c0:dd:f1:ef:4f:
                    73:c9:c5:45:d6:2b:e7:b6:ad:b1:0e:9f:87:58:87:
                    ee:c4:35:2b:e6:f9:21:ec:82:5e:c1:ab:93:c9:dd:
                    2c:0e:3a:2d:e2:1d:8a:1e:44:f6:bc:b2:48:38:ee:
                    60:9f:29:7f:03:91:cf:92:1f:d4:91:b3:a2:47:19:
                    13:fc:d3:55:5e:2b:3c:28:2c:1a:3d:8d:08:7a:55:
                    e4:2a:47:93:c6:36:1a:4d:e9:fb:7c:04:31:56:af:
                    67:6e:9f:4b:54:d0:a6:87:32:82:45:7b:a9:f5:a3:
                    ec:f2:8f:6b:5b:25:e8:af:ba:46:8e:a5:a0:17:96:
                    6d:0e:b7:64:40:33:9c:17:44:86:44:9d:e8:a6:d6:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:12:79:6D:58:DC:88:C1:F0:6C:0D:A4:9E:2E:BC:7C:FA:0C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:61:c8:1e:54:26:c2:c7:c1:41:5c:fc:93:26:4a:db:18:94:
         e9:59:75:05:68:cd:88:eb:99:37:10:53:10:a3:83:6f:ea:f2:
         2b:f9:d4:b9:ee:d1:f4:98:39:98:97:87:92:9b:05:16:ef:c4:
         2d:35:a5:f5:93:c4:ec:8b:29:7e:0b:d1:a2:6f:cc:54:a9:89:
         97:29:71:6d:58:97:4e:8a:bd:cf:a9:e0:b1:f6:cb:ac:eb:14:
         66:7d:65:c0:88:0d:93:cd:c2:4f:86:86:fc:a9:10:20:c6:57:
         91:27:28:07:43:11:0e:18:f6:03:f4:ff:83:74:86:21:62:f8:
         4b:e0:f5:42:81:89:e6:c5:f7:8c:45:ff:fa:6e:4d:af:68:f7:
         90:83:11:0d:d6:5e:f5:d5:c8:4c:22:b8:2f:e9:f9:35:f4:60:
         7c:98:2f:34:b6:6e:f7:f7:7d:54:dc:d6:50:92:40:91:80:1f:
         f4:cd:6f:20:73:db:49:48:f9:e7:86:60:7b:3f:40:ed:de:87:
         73:10:2f:86:24:4f:ae:9b:d1:b4:0f:a2:7f:8a:4c:e9:24:43:
         c2:91:1a:19:f1:09:dc:b1:bd:2d:c9:88:9e:e0:cb:fb:14:03:
         2a:4b:da:fd:cd:ac:a0:ce:dd:b5:69:d9:b0:c1:89:bc:c2:7a:
         2c:70:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:28 2025 by rpki-client