Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa
File:                     c54be940-176e-3507-b859-c6607747abb6.roa (raw, json)
Hash identifier:          eV335eFqkfhGyK4e2deyWuG2+i0bzg30dCIT3SEfzC8=
Subject key identifier:   7A:E0:B3:F4:09:76:9B:F0:9B:69:C1:7B:9F:D3:E5:02:7A:00:2F:FE
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285848222FCE62D4609BC741BD62C0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        192.184.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ce:62:d4:60:9b:c7:41:bd:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=cdae251b-56d4-4ada-80c0-e90647cde5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:6d:4a:ca:9b:7a:c8:1b:04:75:02:52:d9:
                    a9:2b:62:69:ea:f5:9d:90:8c:b0:16:a0:ae:5c:71:
                    3e:d0:e7:6a:9b:08:6d:82:60:72:0d:f7:cd:c7:3f:
                    02:fc:48:b0:9a:ff:84:48:33:30:dd:d7:d6:6a:2b:
                    55:d0:0d:89:f9:9b:b8:69:a6:7b:11:89:93:e8:1d:
                    8b:d5:46:24:00:e7:12:62:e2:e0:36:c1:d6:05:8d:
                    cc:30:77:9e:7d:b7:ec:12:08:15:89:4d:67:a4:be:
                    5c:27:07:47:75:f7:0d:35:18:a2:92:ee:a8:f9:7f:
                    ac:9b:f0:e0:b8:f6:8d:79:88:ff:7f:99:a9:c1:6a:
                    a5:79:ea:3c:11:03:a6:42:26:53:82:1a:43:68:44:
                    07:2b:50:1c:24:ed:b6:6e:25:80:6d:57:93:18:34:
                    7a:ab:f3:b3:b1:05:46:b8:a5:23:4f:93:ae:ba:36:
                    a0:eb:7b:31:b0:05:5d:0a:f0:06:82:c4:ff:45:16:
                    02:27:fd:b1:a6:1c:20:51:2f:b6:8f:e2:89:d7:02:
                    21:ab:a7:3f:0c:38:d4:3f:5b:67:4a:3d:3c:66:b4:
                    90:7d:c0:0c:f4:22:a8:7e:1e:e1:09:43:d7:a7:fe:
                    de:98:4f:1e:38:2f:65:4b:58:76:14:f2:f5:5a:3c:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:B3:F4:09:76:9B:F0:9B:69:C1:7B:9F:D3:E5:02:7A:00:2F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:92:b2:c1:a1:ae:11:75:44:fe:d0:0d:4c:8d:1e:94:36:fe:
         8c:08:e8:f0:57:3e:d6:bc:4a:ff:ec:bd:bf:c7:0c:40:f0:bf:
         34:bd:86:e0:d5:b1:81:09:5d:39:15:fa:a8:4d:67:52:c0:17:
         9f:39:e8:0e:b2:7b:c8:f1:c0:4e:92:03:f3:9d:cf:26:49:44:
         b0:a2:c5:fe:9d:13:92:ee:af:4f:8b:6d:66:bc:ef:7f:55:2a:
         6f:ba:f0:a6:92:70:b5:f3:8e:27:b8:45:cd:ff:a9:e7:27:64:
         68:62:92:e7:be:40:5d:bd:28:68:68:58:07:78:31:e4:bc:d7:
         ef:62:b9:7c:6e:1f:0b:cd:a6:2d:62:ac:a6:1f:d9:9a:9d:96:
         27:12:6a:d3:58:7b:cb:d0:f1:ec:ce:f4:0d:1f:db:30:52:d6:
         b4:8b:05:17:3d:c1:a8:2c:bc:50:3f:0c:cd:f6:a4:df:3e:4c:
         f9:0f:30:d8:ef:99:ab:6e:d9:c4:c2:21:94:9b:e7:94:35:cb:
         b3:ad:c2:0a:9f:21:c8:ff:0a:10:5f:fb:2a:24:e6:dc:fc:77:
         32:6a:5f:97:72:b7:8b:b2:94:1c:f2:24:85:c7:2b:3d:2e:e3:
         72:bb:7e:37:70:eb:52:29:07:a7:33:73:19:09:4a:b2:fe:36:
         de:9e:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:20 2025 by rpki-client