Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
File:                     255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa (raw, json)
Hash identifier:          J2vsT0jTNuGq3OrnhmRfhzd+CK1LZh24+19wRJRT46w=
Subject key identifier:   9D:F5:AB:19:F2:0B:24:44:70:0E:56:CA:1B:F1:B0:99:7F:B9:37:37
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584871C06FAD5F660D844BC1FDC0
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     25623
IP address blocks:        162.219.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6f:ad:5f:66:0d:84:4b:c1:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=56c75b1e-5da9-497d-9b2c-4f56d170fc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:fb:d7:49:28:00:24:94:6b:84:22:6d:e8:
                    7b:4e:e1:ad:9f:1f:7d:7c:40:6c:f7:4c:df:c8:83:
                    58:88:8d:ef:3e:09:c5:dc:b0:d7:a9:47:7b:f3:fc:
                    98:26:ba:fa:18:07:d1:87:e3:aa:10:07:59:fa:ce:
                    4d:a4:97:5a:c4:7a:1a:9e:96:ea:01:5b:af:a0:1f:
                    9d:d0:b0:8e:02:77:00:25:3a:80:da:a7:c5:58:dc:
                    94:7e:af:93:b9:02:3d:b3:a4:35:82:49:af:f7:08:
                    82:87:8c:9d:a3:92:a1:0b:55:d0:58:c0:84:a3:7a:
                    eb:e7:a6:e8:99:51:0b:30:21:c5:2c:05:d0:57:63:
                    46:9b:05:2a:7b:eb:62:7c:d9:f4:40:1c:f5:f7:1e:
                    39:d0:fe:f1:a5:06:03:27:d6:0f:22:28:ab:d6:03:
                    3c:92:7a:5c:76:94:7b:4f:59:f4:a1:72:77:e3:c7:
                    2b:5f:12:b3:f2:aa:80:fb:19:27:8f:85:b0:a5:36:
                    2a:9d:1a:a5:cd:38:9b:dc:3f:1a:f8:6d:c8:4e:32:
                    c5:2b:9c:49:df:62:d0:c6:47:c5:7b:11:d3:4d:15:
                    89:2a:fe:c8:77:70:10:f3:1e:ff:45:18:13:ff:f6:
                    3d:47:4b:5f:e7:85:59:c2:2c:e8:cf:bb:61:4c:9d:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F5:AB:19:F2:0B:24:44:70:0E:56:CA:1B:F1:B0:99:7F:B9:37:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:3f:68:05:f5:8a:bd:12:14:8a:2c:45:39:d7:b3:59:35:
         ca:81:45:08:94:32:77:1f:8e:e9:13:9c:47:23:a3:13:c7:f7:
         60:91:3d:70:9f:c9:b1:f7:87:2a:79:97:87:b6:f1:90:54:22:
         96:fd:ff:2b:8c:aa:31:24:3b:da:f4:1d:4e:a4:ca:55:b5:2a:
         be:b0:64:05:1e:d4:94:17:f7:16:d0:8b:29:a6:48:68:fe:1d:
         9b:eb:5f:ce:89:70:2b:11:d6:e9:a3:93:b2:1e:20:ee:14:d1:
         a3:3c:a1:ee:0e:83:f3:a8:2c:e6:56:89:39:df:de:4a:0f:4f:
         35:14:76:17:30:b9:19:a9:f0:2b:49:91:e4:69:73:23:88:c5:
         02:83:e0:a0:06:8b:a3:b1:71:98:92:04:17:43:58:f5:70:69:
         72:99:54:fd:91:db:7c:58:73:41:01:6f:70:ee:bd:95:9c:a3:
         66:22:78:64:b9:e7:31:c0:ab:16:a3:6f:1b:70:79:8b:d6:67:
         38:5d:f0:0f:dd:10:af:62:a7:ae:27:24:91:c0:93:10:95:19:
         b5:b6:e3:42:37:7e:cf:53:02:7e:f2:cc:59:1c:19:bb:ef:c0:
         18:91:36:e4:c4:4c:99:dc:78:21:8c:49:f9:30:be:bb:d8:b6:
         d6:5d:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:52 2025 by rpki-client