Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa
File:                     0e4b0048-b197-364d-82a5-3127b9f92159.roa (raw, json)
Hash identifier:          D+uCjoQ0IOl1EEmhYJDERU47d9IYQ4pL2AIYqwqtdpA=
Subject key identifier:   57:18:52:52:31:60:1C:87:4E:76:9C:41:86:60:18:71:20:0C:77:24
Certificate issuer:       /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial:       010D0C9F4328584806450067628B93FB74288A24
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     14618
IP address blocks:        209.163.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:00:67:62:8b:93:fb:74:28:8a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=c05f65d0-ed46-4f75-93c4-77cf53a07627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:f4:04:a6:5a:81:6b:84:98:b2:ea:1c:bc:
                    1b:f2:bd:5e:1e:f2:c9:d8:62:d0:26:12:19:a4:f4:
                    c5:c1:9f:71:00:75:55:04:75:57:cf:4d:0e:f2:42:
                    a8:5e:f4:59:70:aa:b7:7e:2f:5b:b0:a7:28:96:a3:
                    9c:2f:e5:c1:5e:59:0e:98:d4:56:76:f0:de:62:d9:
                    73:c7:fd:db:02:81:79:4d:93:33:d3:a6:b5:52:94:
                    c1:e1:f4:14:3c:d5:51:0c:2f:12:6c:55:99:71:19:
                    6b:20:ce:1e:60:49:32:57:53:10:40:af:f2:07:a3:
                    e0:d0:4a:a5:cd:d9:58:13:7d:df:6a:a4:df:68:1c:
                    be:16:3f:e2:ff:e6:b2:00:78:95:e2:0d:1b:f8:f3:
                    1a:08:03:a6:e3:2f:3b:bf:26:96:c8:3a:38:1e:2b:
                    fd:c9:78:b1:97:c0:de:50:ef:2d:0f:00:16:54:26:
                    47:bb:bf:51:b8:e1:99:26:dc:fb:16:9b:37:79:92:
                    1c:99:10:7f:a5:3a:78:3e:5b:52:f9:e8:dc:91:17:
                    81:9c:83:da:c1:73:7b:95:6b:99:9e:d8:6c:d7:18:
                    10:dc:7c:21:c0:7b:42:ec:e8:b0:5f:e3:c6:7c:62:
                    63:c0:8b:2d:3d:60:d7:b1:13:e7:7d:f0:1d:41:58:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:52:52:31:60:1C:87:4E:76:9C:41:86:60:18:71:20:0C:77:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl

            X509v3 Authority Key Identifier:
                keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:bf:10:9c:34:95:d5:58:35:2c:af:90:0b:1c:db:9b:1f:
         a5:d3:e2:e5:d0:10:25:0c:74:e6:58:d4:c0:3d:e4:1b:a3:16:
         d8:f1:5f:69:44:6f:04:70:f8:eb:a8:a9:33:30:1a:23:c9:66:
         a4:7d:b5:64:d4:77:78:b6:97:09:dd:6c:7e:ec:2e:92:11:5a:
         29:21:0a:1c:e0:c5:a7:0c:c3:ff:2e:25:12:64:1b:96:6d:13:
         a9:fb:91:db:8b:09:b1:0f:4e:20:17:14:e5:2b:c4:64:fc:c2:
         a8:0d:70:ef:e1:ef:01:00:ee:6a:b2:b8:8f:58:c0:1a:1d:5c:
         18:5d:0e:f0:98:f7:64:8b:34:06:35:81:a9:77:b1:e4:55:88:
         a8:41:3e:b3:10:7a:20:90:95:4e:b4:56:33:c4:a6:7a:bb:14:
         52:ed:17:04:45:ba:09:8c:33:21:19:0c:cb:38:59:1d:c9:e3:
         b2:49:8e:2b:54:5d:28:e1:a5:72:e2:88:25:aa:6e:2e:88:54:
         03:6b:39:3a:a0:46:d9:21:08:38:68:33:0c:db:00:4d:88:e4:
         3d:fb:69:f6:ad:bb:96:f8:f4:09:4f:e2:b5:58:8f:5c:0e:29:
         2e:ea:f1:63:64:18:37:47:a3:87:4c:0f:84:f4:a7:ad:15:ae:
         b7:da:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:00 2025 by rpki-client