Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/05319a2c-6f75-357c-8453-bfb3555eed7c.roa
File:                     05319a2c-6f75-357c-8453-bfb3555eed7c.roa (raw, json)
Hash identifier:          a20JX70Yl0rro2MbWjEuZJXPwsiJQJXS3sIpou3+ySU=
Subject key identifier:   08:1C:D8:2C:99:C7:CA:0B:A4:61:C5:71:A9:D1:DC:EC:BA:E0:88:E4
Certificate issuer:       /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Certificate serial:       010D0C9F432858480644F4300390F75C8E0BA540
Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/05319a2c-6f75-357c-8453-bfb3555eed7c.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     14618
IP address blocks:        209.94.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f4:30:03:90:f7:5c:8e:0b:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=5ad3d1b1-ac85-4033-aafb-7d8b083e7434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:dc:f8:dc:73:41:5f:4e:34:ff:eb:73:7a:
                    b8:34:84:e1:ab:0e:a0:ba:c9:07:ae:5a:09:38:75:
                    69:59:59:09:d6:ef:82:05:4e:0e:50:fd:d2:74:a2:
                    28:da:d0:93:0e:d8:a5:0f:3c:92:4a:63:f0:aa:a7:
                    cc:f3:0f:ac:52:3b:52:02:42:c5:e3:ee:98:61:b2:
                    74:e2:06:86:93:c9:56:f9:7e:7c:2a:1c:cb:7d:6f:
                    9b:7d:b8:62:92:f3:ba:15:5c:34:49:54:89:b0:87:
                    f3:19:19:13:31:52:28:b1:79:02:6a:cd:32:69:44:
                    01:6b:9c:c2:28:81:fd:69:03:7f:6e:b3:2c:d5:23:
                    5e:e0:3f:66:c4:f0:7f:f2:71:47:e6:15:f9:de:42:
                    62:8a:bb:eb:a1:e9:4b:4c:6b:1b:e6:1a:4b:43:1a:
                    b8:62:a8:f8:98:0c:c0:0a:23:b7:d3:ed:08:2a:48:
                    1e:89:bf:32:bd:65:09:05:56:7b:ea:47:42:7d:83:
                    0e:18:3f:28:ae:30:fd:d8:2c:81:9e:bf:b5:23:89:
                    22:b1:37:79:5d:f5:4e:b4:38:9f:1c:ad:25:21:5d:
                    35:08:e5:02:97:87:13:16:9f:2d:95:fb:2a:9e:96:
                    e9:33:bd:26:6c:9c:de:ef:24:c3:94:1b:79:dc:a4:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:D8:2C:99:C7:CA:0B:A4:61:C5:71:A9:D1:DC:EC:BA:E0:88:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/05319a2c-6f75-357c-8453-bfb3555eed7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl

            X509v3 Authority Key Identifier:
                keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:48:e4:97:51:4d:5e:e6:33:71:91:62:62:71:be:9b:e6:73:
         d2:95:7e:31:61:dc:be:41:c6:5f:aa:51:44:77:30:50:b5:7b:
         e2:23:da:1e:9a:05:5d:8a:b2:70:3d:7f:59:71:3d:b5:d5:95:
         d2:aa:1f:b0:bf:53:67:32:03:4f:34:5b:ad:b0:cb:1c:bf:cc:
         2c:3e:41:e4:2e:89:bf:15:cd:ce:da:65:d0:5c:4c:f5:bc:01:
         4e:d2:00:5f:ca:f6:65:0b:c4:d1:58:22:e0:12:a3:d2:03:7c:
         5a:e8:f9:74:8e:02:c2:7d:aa:02:c3:dd:b8:b1:5a:a0:d0:db:
         75:98:44:77:ba:23:98:52:98:84:5b:9b:fe:fa:96:38:df:81:
         ef:49:82:4a:52:84:58:87:90:b8:d5:14:46:a4:49:73:1d:0f:
         0c:36:87:33:c1:00:b0:14:2a:15:0f:fd:5a:31:78:1e:3f:7f:
         49:7d:47:74:63:88:d9:f2:1d:a5:52:6a:18:19:20:cf:ae:80:
         6b:3f:06:e7:72:35:c8:05:67:5c:14:9c:84:2c:ae:c0:18:8c:
         23:1b:54:66:d5:62:b0:c5:f7:fb:8e:e1:4f:cb:c2:01:8c:26:
         eb:25:a1:70:37:8f:eb:af:ae:1d:cc:c7:6e:f4:2d:8d:a9:7e:
         7a:45:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:14 2025 by rpki-client