Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa
File:                     91c86816-35b3-328c-94e1-89b663410835.roa (raw, json)
Hash identifier:          Poq3K0fpJ31PX6no25imV1YemyAnA6qSEuvUnQP5vt4=
Subject key identifier:   81:F7:1D:8F:3D:C8:53:EF:0E:B3:63:06:95:EF:1F:8B:91:FF:70:92
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584854702E8BFAA35B7B9C6B3BA0
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     16580
IP address blocks:        131.232.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:2e:8b:fa:a3:5b:7b:9c:6b:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=cc81d31c-a2dd-45c1-8d4e-a6656c204b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:95:a8:58:3e:06:dc:0f:27:f8:0b:62:09:
                    55:53:23:00:64:d0:8c:a1:a8:85:44:66:19:47:34:
                    9f:2e:7a:d0:f2:5c:2f:31:38:d4:5a:73:08:f8:f3:
                    84:34:20:a0:b2:38:d6:7c:58:19:12:d6:62:95:f7:
                    2b:a8:0b:ca:86:e2:67:88:86:84:6f:fb:1c:d0:9e:
                    8c:4a:52:5a:3d:4b:98:20:e0:88:55:04:b8:46:3d:
                    b0:c4:ba:3d:60:b0:35:9b:f6:15:66:3b:cc:7a:e3:
                    e1:28:ab:ef:5d:21:b7:1d:a4:9c:47:02:18:e7:f6:
                    62:1e:50:cd:52:76:3a:a5:00:cb:de:be:63:7a:af:
                    0f:4b:b8:97:71:ca:ae:4f:8d:75:9b:06:f1:4e:63:
                    8c:f1:30:5d:92:ce:1e:b0:b9:24:c2:40:d4:c4:aa:
                    f7:fa:4f:c5:47:f1:23:fc:05:fb:99:dc:3a:63:88:
                    c6:0c:2e:ed:e3:4a:39:dd:f8:c6:5b:90:45:43:71:
                    6f:a2:12:b5:c1:3f:9c:f4:7b:94:97:f6:24:e4:84:
                    58:c1:aa:62:a9:c9:fb:6a:a5:39:ac:63:27:e9:b1:
                    5c:cb:7b:14:2e:0e:de:f3:57:96:7f:2d:c3:d6:49:
                    8e:2e:26:58:86:68:71:a8:1d:6f:13:0e:9a:f6:69:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:1D:8F:3D:C8:53:EF:0E:B3:63:06:95:EF:1F:8B:91:FF:70:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:8a:34:37:52:48:9c:47:9f:66:58:68:7b:31:9b:02:1b:
         1b:06:cb:8a:31:b3:27:8c:46:25:db:1e:ef:5e:a7:60:ea:eb:
         b3:aa:e2:a1:1f:47:73:0d:28:58:73:0f:ce:48:86:d0:fd:cc:
         a8:a5:d8:72:7b:a8:be:5b:71:8a:f1:95:b6:0b:d6:e0:b3:c4:
         1b:03:30:51:3a:5b:99:3a:3d:db:d6:04:15:ba:14:35:c2:04:
         0f:4b:ad:ea:00:ec:40:24:23:73:af:88:a1:26:69:c3:5d:5d:
         a8:3f:e6:ae:91:59:7f:29:30:03:6c:e9:76:b4:54:b5:ee:fe:
         0f:18:74:a0:93:16:a6:27:70:d6:49:ae:c3:12:af:7f:47:67:
         db:9d:11:9f:b0:a9:93:90:24:44:27:22:8e:cc:ad:38:0e:f2:
         e6:12:ca:50:bf:4f:7e:6e:d7:8d:f3:d3:98:28:f4:e7:c3:77:
         33:c6:42:e7:8b:4d:0a:21:18:5d:b7:09:d5:2f:01:5c:1b:dc:
         31:0f:91:9d:f1:c4:ec:6e:cd:7d:c1:2e:d9:06:bd:78:46:96:
         35:2c:c9:02:3d:31:1a:5f:ae:02:1c:c5:2d:d4:dc:b6:84:9a:
         5f:bb:6b:a4:36:ae:07:d6:50:89:9b:a7:27:f8:b4:1e:0b:af:
         f4:a9:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:36 2025 by rpki-client