Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa
File:                     7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa (raw, json)
Hash identifier:          FUm+PCnh6HwyoBIb2c/5xo3gpben/3mQIoJrPUYTlLM=
Subject key identifier:   C2:75:DF:85:ED:2D:37:29:08:02:2D:1F:7D:1B:4E:7E:23:A7:2F:6E
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F432858481C9A80B99E2037119D967200
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        131.232.76.0/24 maxlen: 24
                          131.232.77.0/24 maxlen: 24
                          131.232.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:80:b9:9e:20:37:11:9d:96:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=5ee60650-a4b3-4103-ac6d-ca16ef75c2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:7a:6d:c1:62:ae:71:8d:76:d2:0e:f9:b4:
                    8f:25:01:41:5f:79:05:af:6b:ba:77:f7:20:a5:f0:
                    40:2b:6a:f2:a6:be:b8:e7:72:19:04:f1:88:7f:8c:
                    53:9c:9b:60:5c:b6:4e:8f:92:e0:42:e7:9d:14:d0:
                    e3:81:4d:0f:07:f9:99:ad:82:e5:ca:a5:e7:f1:d6:
                    32:e4:66:10:44:0f:13:18:ba:71:4f:95:20:1d:85:
                    be:7a:75:27:52:77:1a:33:95:17:9c:a3:33:56:f8:
                    ec:91:c9:1d:17:96:f1:2e:24:3c:58:0e:28:87:30:
                    04:74:19:07:b0:94:ca:75:06:8f:a4:d1:a4:91:17:
                    54:49:c5:10:39:be:09:96:1e:1f:4b:0c:aa:c9:29:
                    04:f0:d4:ba:a0:25:6c:97:1a:d0:b3:4f:41:87:2c:
                    6f:5d:43:52:40:ad:73:12:56:2a:b9:91:a8:6f:4c:
                    95:77:72:d2:08:b1:5b:e6:c8:99:37:80:9f:78:43:
                    03:1e:d7:b9:19:de:28:dd:4e:b3:12:03:0e:8c:69:
                    37:79:b6:8d:f7:31:25:e8:9e:63:43:f3:d8:cb:f5:
                    08:d7:0b:51:e7:a6:00:a7:ae:02:1c:c0:73:bd:b2:
                    9b:06:ec:fe:00:4d:7f:67:75:cb:33:58:6a:18:3c:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:DF:85:ED:2D:37:29:08:02:2D:1F:7D:1B:4E:7E:23:A7:2F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.76.0-131.232.78.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:22:97:a0:b3:34:52:b7:dd:4a:2b:0d:22:19:26:29:2a:b9:
         b6:68:32:59:75:e3:9d:ec:a8:bc:46:2a:bb:96:c2:bd:2b:93:
         8b:e7:b5:e1:51:04:31:7e:75:9d:bb:9e:b9:70:0a:2e:81:0f:
         09:d9:f0:44:be:3b:55:76:34:11:54:b3:76:dc:92:dc:48:a8:
         4a:73:c9:2b:5e:a9:99:d9:6e:f2:5a:7c:f2:fb:24:0d:0a:a6:
         f1:01:5b:ca:92:21:96:61:e0:2a:e8:c0:a5:e1:1b:c6:2a:d6:
         62:c9:5d:82:b9:8b:cc:9c:5f:34:0c:22:7d:f2:77:69:81:71:
         f3:2b:a0:aa:89:dd:68:ab:2c:3c:ed:60:f6:4c:28:4d:97:9a:
         3a:72:ff:47:db:88:ce:84:df:39:c5:09:92:2c:9e:39:18:99:
         5a:bf:51:b6:69:9d:cc:2f:0e:11:ac:ca:d2:47:82:32:49:a6:
         6f:47:67:c2:f5:f6:17:4a:54:58:a2:24:fe:46:d2:ab:06:9f:
         cd:23:39:b1:d6:01:dc:35:bc:e0:13:3f:9c:96:e9:60:ff:e0:
         4c:e6:7b:bb:46:44:47:64:cb:1e:09:ab:a7:88:1d:f4:28:f9:
         6f:d7:95:3b:06:71:08:39:21:5f:3a:40:97:38:d1:83:80:fb:
         95:70:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:05 2025 by rpki-client