Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa
File:                     d3444f5a-9653-3573-a9e8-b622fe731b30.roa (raw, json)
Hash identifier:          vExVYm19X2Iq+xJIxhAb4RrUL3Uqlo3BVGMpCRahIeA=
Subject key identifier:   CD:6F:CF:36:8F:7F:23:21:FE:DF:6A:E1:C8:F7:84:49:FB:E6:E3:72
Certificate issuer:       /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial:       010D0C9F432858487325ABC202AE7DA1A1456C00
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     23241
IP address blocks:        170.89.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ab:c2:02:ae:7d:a1:a1:45:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=d1f2c3fc-73c2-4d3f-a56d-a01f7378afab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:98:01:63:99:c7:6a:36:63:62:fd:0f:9f:
                    64:92:db:84:77:ef:27:29:7e:a8:c3:2e:1e:4d:97:
                    d0:a1:5f:f5:92:d6:e2:cf:64:60:52:54:e1:26:64:
                    5a:64:ef:a7:40:42:b6:5b:f3:48:3d:00:03:a7:9e:
                    eb:4c:e1:01:be:9e:bb:4d:05:e3:b5:3d:a7:16:4c:
                    1b:98:96:8f:d6:0b:9b:39:7e:74:bf:de:41:39:3d:
                    b7:6d:1e:59:c9:0b:8a:57:95:cf:20:03:f9:bd:2d:
                    d1:6e:69:d9:f6:d1:51:71:12:68:31:05:7d:e7:ea:
                    f9:e4:29:a4:c8:f3:bc:14:4d:f5:81:24:86:ed:de:
                    b4:c6:f0:52:b0:9c:19:d8:b7:9b:cb:55:28:f9:00:
                    36:04:33:2d:21:a6:a8:d4:91:ca:53:7a:03:29:84:
                    cf:6b:26:66:ca:fe:51:3f:74:99:5f:2d:63:7b:e5:
                    cf:8b:8b:54:af:9f:d2:73:2b:40:34:08:af:a1:d9:
                    a6:5c:df:27:cb:54:8a:22:1e:0e:98:e1:47:13:6b:
                    1a:c6:f9:e3:2b:53:ba:04:45:ee:ff:06:97:ff:3d:
                    5b:99:b5:a8:50:8d:eb:fe:ad:f5:5a:f0:d6:f9:eb:
                    ee:37:fb:d3:0a:5b:03:49:3c:4b:4f:19:ce:55:21:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:CF:36:8F:7F:23:21:FE:DF:6A:E1:C8:F7:84:49:FB:E6:E3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.89.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:93:d0:54:e0:c1:f5:bc:e5:36:06:ea:0b:c6:0c:17:b4:
         be:83:d2:01:3f:d5:05:57:eb:f6:e0:83:3a:6f:e3:d9:0c:38:
         cb:47:48:50:6c:8a:af:26:c6:ab:d3:45:a4:7c:6e:33:8c:76:
         61:f4:b3:38:8c:03:b4:00:f4:8d:e2:f5:ab:dc:aa:75:37:e2:
         b2:e5:5d:e2:37:e8:35:6d:4e:ad:0a:b4:9f:da:81:cc:8b:2b:
         a0:7c:a9:a0:56:99:11:f9:a8:a6:58:0b:80:08:45:cc:b7:ac:
         7e:c0:5c:d0:dd:c1:a5:3d:dc:cb:74:2b:e1:66:7f:76:5b:24:
         e2:43:6e:cd:b7:60:00:94:93:dc:4b:be:de:c1:14:45:e6:8e:
         b6:5f:c2:66:ff:17:eb:f5:4d:f8:b1:cd:de:e8:fa:0c:f2:b7:
         4e:78:e7:91:d3:87:95:12:89:be:87:55:1e:24:f2:5a:66:61:
         df:4b:92:2e:7e:b1:bf:ec:33:a5:45:da:e2:b7:2d:08:c0:de:
         4c:ec:38:b0:5b:ec:65:2c:46:1b:44:e1:03:d7:e6:15:9e:cb:
         46:58:7f:38:e3:92:1e:3b:f2:03:43:5e:b1:17:42:ed:ce:fc:
         f6:43:b9:c9:1e:d8:a7:c3:e4:ea:84:78:b1:88:7b:03:b0:7b:
         0f:d1:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:38 2025 by rpki-client