Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbdb28e6-20d5-3bf4-82bf-c022d1b5d183.roa
File:                     bbdb28e6-20d5-3bf4-82bf-c022d1b5d183.roa (raw, json)
Hash identifier:          Bpe73HwnJGQI7nJTjtYO7MA7mfoARNteDJ6VY0z35cE=
Subject key identifier:   7C:BA:B3:09:CA:82:F6:F9:E7:D2:E9:47:66:15:48:34:13:0E:EC:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF2A4900D3D0AC42CCD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbdb28e6-20d5-3bf4-82bf-c022d1b5d183.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     207254
IP address blocks:        184.104.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f2:a4:90:0d:3d:0a:c4:2c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=4d87da1c-a14e-4744-8431-093be966d8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:96:ef:04:e1:c0:48:9f:9b:ec:97:2a:4d:
                    2d:03:6d:fb:04:74:88:2e:94:b5:d9:70:c1:aa:28:
                    36:9a:2d:0e:b7:f2:bc:b8:09:3f:0b:b4:30:a8:41:
                    0c:60:25:65:3d:25:10:77:98:bf:dc:e0:94:55:86:
                    3e:36:26:e3:ae:59:eb:0a:3a:94:a4:dd:af:3e:ce:
                    f3:84:da:b7:4a:01:d3:5e:c2:b6:b5:39:e4:ab:52:
                    44:c9:56:23:40:5a:4f:b6:1a:f1:12:3b:83:ef:d4:
                    0c:67:a2:c8:b7:c4:3a:d2:79:c2:81:39:a6:0c:c0:
                    0a:6c:bd:56:a3:7f:21:45:0f:49:0f:88:49:e7:38:
                    ea:8d:b2:ee:b3:28:f1:8a:f2:d4:fa:9c:1a:04:91:
                    7f:ec:6f:1f:34:e5:4f:0a:05:c0:f1:0b:aa:d9:54:
                    5f:45:17:7a:f8:38:69:e2:d4:cc:ae:a4:af:54:bc:
                    a6:b6:f2:f1:49:f5:ef:d8:92:8a:56:45:49:d6:72:
                    12:c1:cb:f2:bd:1e:58:aa:9e:ed:a1:e7:b6:eb:55:
                    7c:00:c7:72:a3:b8:46:16:4e:5c:de:c8:46:9e:46:
                    7d:10:c4:55:78:5a:6f:3c:de:1e:46:7a:ee:a8:10:
                    0d:f9:ce:5d:9f:dd:5b:8d:bd:a5:e0:18:c1:37:13:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:B3:09:CA:82:F6:F9:E7:D2:E9:47:66:15:48:34:13:0E:EC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbdb28e6-20d5-3bf4-82bf-c022d1b5d183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:91:45:dd:f2:d5:32:84:31:90:08:c9:29:6a:16:90:34:5b:
         f6:3c:73:dc:d9:74:9a:70:31:93:36:ae:d1:b3:7d:49:e5:46:
         62:0c:40:24:63:4c:48:56:ed:9f:f7:f5:53:d0:3a:a1:ae:e9:
         f5:73:55:2a:a5:d8:a2:c2:c2:d3:0c:48:27:13:d1:16:8b:9f:
         13:11:83:5c:8a:18:9d:ba:6c:3d:4f:d3:67:1f:b6:25:9e:b5:
         61:15:82:6d:3d:74:cc:86:0c:06:85:6f:55:c1:08:3e:27:c4:
         2b:fb:5e:49:f7:08:46:bc:92:da:73:a9:3a:1c:36:c3:66:8a:
         df:c4:b7:dc:b3:8e:2d:34:4f:58:df:93:05:cd:b5:7f:17:b4:
         e9:0c:81:30:5f:5d:23:07:14:fa:7c:36:4f:66:dc:2c:d8:f1:
         32:90:cc:53:32:67:14:ee:6c:62:0c:dc:10:13:c6:bf:33:ce:
         1a:46:0a:00:c3:24:c7:50:b5:10:ad:53:ed:3a:ad:c4:22:5b:
         1c:73:37:67:6d:5e:d2:8a:55:79:5f:e5:74:39:f6:74:ca:cf:
         26:b2:a5:52:a6:38:9c:a1:3a:04:a6:93:00:73:b1:bc:2c:6e:
         07:43:9b:9d:78:5d:2e:8b:50:fe:59:00:81:fb:a1:db:df:d5:
         67:1b:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:44:08 2025 by rpki-client