Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa
File:                     9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json)
Hash identifier:          aueSWMQwWI+uKkXLsO2RhPYfdG1uHqHuPMNYztpcgm0=
Subject key identifier:   80:BB:46:10:CA:5A:8D:A9:7F:AB:BA:B4:EA:3C:04:CA:F2:15:23:1A
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285847FB1A31349A14B8DF012C1600
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     5645
IP address blocks:        24.212.128.0/17 maxlen: 17
                          24.212.240.0/21 maxlen: 21
                          24.212.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:31:34:9a:14:b8:df:01:2c:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=e295daa8-e960-4e54-b171-5890f842e919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:8c:34:47:70:0d:2e:65:fd:59:c6:62:a3:
                    79:ab:a5:8a:07:14:a7:1e:11:b2:23:b1:d5:c2:06:
                    e5:bc:a0:78:83:ba:cf:36:eb:10:87:e7:87:ad:4d:
                    06:8f:34:f9:e9:58:69:5b:fb:eb:34:4f:e0:b6:c3:
                    f3:c3:f4:c6:65:2d:bd:60:c2:88:6e:da:d5:8b:03:
                    2c:34:61:d2:33:3d:37:e7:92:f6:e5:2e:ec:cd:af:
                    ee:bd:47:92:30:d7:c7:21:33:dd:db:ef:f0:b5:1d:
                    cd:3b:8f:65:f9:39:59:f7:f0:ae:ba:ee:97:63:46:
                    c8:bd:a1:dd:53:37:1d:b4:2f:11:d8:e6:df:db:d9:
                    1f:c9:db:35:0e:18:e9:7b:f1:32:d3:cd:a1:69:4f:
                    2f:d9:20:cf:35:cb:ee:c5:8f:58:f5:ba:42:30:b0:
                    a3:3b:25:9b:d3:a8:b3:36:2f:62:d4:a1:50:bf:6c:
                    ec:fd:bf:84:e3:5e:fb:a2:e0:b6:ca:ab:c4:2a:7e:
                    cd:d6:c7:dc:17:8a:ef:cf:56:b7:3c:fe:cd:98:b5:
                    21:c7:e5:6b:00:f6:de:2a:cd:fd:37:de:3f:44:f5:
                    f3:af:f0:ba:d8:56:48:fb:e7:be:96:f2:74:03:a2:
                    dc:3a:61:be:9e:62:46:bf:cf:60:9c:bb:ae:28:e8:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BB:46:10:CA:5A:8D:A9:7F:AB:BA:B4:EA:3C:04:CA:F2:15:23:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.212.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7d:0e:44:e2:55:da:5e:9f:7a:f8:34:fe:89:27:fa:f6:2b:
         a6:b6:44:30:46:12:52:31:8c:1f:df:80:2c:da:9a:c2:66:a2:
         e7:eb:86:df:8e:ac:f6:05:f3:09:07:fc:0e:fb:11:9c:ed:0d:
         af:db:6c:bb:da:a4:08:25:7b:02:e2:53:de:cf:9e:21:ee:78:
         4e:20:dd:b3:20:d2:9a:5e:7f:72:ca:d9:a5:38:6c:13:b1:40:
         fb:68:4c:bc:b3:91:12:94:36:71:52:8a:a5:63:73:3e:1b:c7:
         85:6f:2f:32:61:17:59:56:73:36:dd:62:c3:2f:4a:a5:30:4d:
         b4:9e:4c:99:de:96:a3:7f:4a:de:4c:7f:18:d4:9d:29:c1:5c:
         86:6a:6f:eb:7e:cd:7d:b8:d5:b3:80:cc:78:52:48:59:61:82:
         13:93:a8:c4:1e:b3:79:7d:5d:77:c0:86:d4:87:ca:02:5c:1e:
         bd:30:89:18:d5:d9:44:1b:b3:15:ae:e4:91:9b:53:72:74:07:
         a0:b5:d3:70:82:e2:2a:4f:92:c9:25:74:de:ad:e1:b7:cb:3f:
         a4:1e:7e:3f:f5:fe:3c:08:56:a4:20:5c:9c:a2:6e:b5:c3:94:
         3b:b4:eb:12:ef:7a:71:b9:55:cf:e9:5a:4e:4d:36:ab:c9:dc:
         f6:54:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:40:39 2025 by rpki-client