Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6b1b49d0-e770-3bb1-bf94-3510fd33d097.roa
File:                     6b1b49d0-e770-3bb1-bf94-3510fd33d097.roa (raw, json)
Hash identifier:          XidyLh82dD+R07IDU62TfFxjqS1L43kI4rWMwSwphAQ=
Subject key identifier:   39:6A:2E:4D:F3:2D:57:A4:59:53:25:9F:E4:BF:54:CB:13:80:26:8E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584819CFC2D46D3BC55B415E8BC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6b1b49d0-e770-3bb1-bf94-3510fd33d097.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        134.224.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c2:d4:6d:3b:c5:5b:41:5e:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=428c83e1-8460-495b-840b-17a3febebb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:3c:01:76:9b:1a:f5:72:c8:95:33:bc:8d:
                    66:c3:c1:4c:ef:88:39:e5:43:92:b0:20:11:7e:f8:
                    73:e9:2f:c5:8c:07:2a:45:bc:1a:c9:89:b8:6e:ae:
                    3a:21:6a:70:7a:9e:cb:e4:3a:d6:74:3d:13:7b:4d:
                    3e:5c:73:5a:59:fb:50:11:74:c3:88:c7:03:cc:29:
                    e9:c5:62:6c:ff:4d:91:3c:4f:a9:ed:c6:7b:5f:86:
                    34:7f:e3:08:6d:f5:bb:e3:49:4c:f2:2d:5b:a2:c4:
                    88:83:bd:49:93:e0:d2:62:af:16:0a:72:f2:63:6d:
                    96:98:7f:54:56:d0:d5:75:06:be:5c:c3:7e:ea:57:
                    11:da:c2:2b:b2:f6:db:cb:39:c9:f0:35:ce:bd:47:
                    99:a4:be:bc:43:a1:f9:6a:94:f2:0a:6a:e0:d6:3d:
                    11:e4:17:5f:11:4f:f6:e8:47:ff:8c:ff:00:6b:8f:
                    a9:35:8f:98:47:af:b5:55:2e:94:aa:2b:91:7c:4a:
                    b2:df:99:9d:25:b7:dc:c4:e4:d2:f6:a3:e9:b5:bc:
                    84:e0:20:0d:6f:d5:d0:18:6b:6d:15:88:b8:f1:43:
                    3f:c8:e3:11:84:72:49:d3:29:e7:34:9b:fc:7f:76:
                    b9:29:5a:42:64:1b:34:45:b3:ff:84:86:1b:4c:7c:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:2E:4D:F3:2D:57:A4:59:53:25:9F:E4:BF:54:CB:13:80:26:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6b1b49d0-e770-3bb1-bf94-3510fd33d097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:2e:9f:8a:4e:be:b7:f5:a5:df:eb:d3:cd:92:f5:d2:ec:
         08:cd:eb:34:6f:d9:9e:70:c5:92:b5:16:de:30:ec:45:59:24:
         1d:86:af:b7:b5:f9:02:2a:d7:7e:9a:79:10:bb:73:be:86:e4:
         bc:7f:99:7e:aa:33:9c:0f:95:5e:62:96:1c:3d:e9:c5:b7:26:
         7f:61:c5:83:15:a5:28:df:79:e4:fe:18:ab:47:d4:1e:c5:a7:
         81:44:6e:0c:61:f9:84:48:e2:8a:75:80:6d:b5:90:28:19:ae:
         47:87:45:14:4b:9c:d4:bf:81:9b:e4:8a:6f:74:c6:c4:f6:eb:
         d3:86:21:35:6f:9a:9e:58:20:d3:0e:84:5e:72:ed:e4:9e:58:
         0c:da:15:6e:f8:b2:8e:aa:6e:33:72:ec:f5:60:d2:9e:e8:f9:
         d4:3b:ac:40:f3:22:fd:0b:10:b4:16:1a:b6:91:6e:20:62:43:
         de:89:bb:e5:e3:ac:75:e7:38:6a:f9:a0:7f:0e:26:02:05:7b:
         75:a7:70:23:0b:f0:e4:57:c3:90:9e:da:7b:13:0b:1b:67:26:
         b0:8d:8c:72:ae:95:c8:a9:dc:4f:d6:fb:05:22:35:85:60:7f:
         2d:6f:10:25:2e:09:33:ad:eb:22:42:5b:54:95:fa:0c:86:6d:
         00:b6:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:36 2025 by rpki-client