Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa
File:                     ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa (raw, json)
Hash identifier:          Is0svT+5RUfFmjOy7DTN/XUHFL6Zg6Ur41g5KFQzZfE=
Subject key identifier:   16:A3:65:16:87:27:CD:F7:48:90:F6:29:E1:FE:FC:82:90:2E:60:B7
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858486695B081266F12935777C4E0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     23154
IP address blocks:        148.164.44.0/23 maxlen: 23
                          148.164.44.0/24 maxlen: 24
                          148.164.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b0:81:26:6f:12:93:57:77:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=e1f34368-d720-4186-9012-ba549b49be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:dd:d4:70:94:41:ff:ed:30:3c:2a:da:f6:
                    c5:58:a1:ab:e1:56:78:b2:ea:56:6f:1b:15:cd:58:
                    e5:3b:d9:0f:50:f1:b2:d9:8f:b2:57:1b:5c:c2:7b:
                    9b:25:a4:df:d6:2c:c6:30:09:f2:8b:dd:a6:ac:bf:
                    7c:cf:6e:70:00:f8:9a:54:94:11:a6:d0:fc:4d:89:
                    f1:f2:05:f8:cc:36:a0:ce:10:01:c1:41:c2:6b:48:
                    0e:08:61:4c:37:73:5f:fb:40:98:e4:b2:e0:f0:50:
                    d7:5b:6a:9d:d9:42:d9:60:22:d8:d5:83:1e:91:02:
                    57:d2:21:37:9d:18:97:77:23:96:61:57:ce:30:8f:
                    20:13:0d:72:36:a1:c3:c4:c7:1f:b9:79:8d:75:c5:
                    2f:a7:43:f8:d5:26:93:93:12:52:bc:84:02:2a:44:
                    db:bd:af:dc:3b:71:79:7d:25:5d:ae:4f:d5:da:fd:
                    63:a4:e8:e3:bb:cc:95:3a:3b:44:a4:04:2a:66:95:
                    e7:5a:4c:1a:a2:ab:0d:07:37:ae:4e:26:07:6e:32:
                    38:89:55:82:04:55:07:64:13:fc:c1:13:d7:13:9d:
                    f0:c7:2b:c9:29:f0:fb:da:c9:f7:8e:c7:bf:5f:3a:
                    b5:d7:5d:93:eb:2a:a5:29:c0:1b:b4:79:de:71:cd:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A3:65:16:87:27:CD:F7:48:90:F6:29:E1:FE:FC:82:90:2E:60:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f8:66:55:e4:28:dd:b4:e9:17:47:9f:c0:51:a9:f2:54:bd:
         9a:39:65:8d:b8:35:f3:6a:ff:41:69:87:95:48:e6:30:c7:55:
         8a:41:aa:ca:fe:b2:65:3f:61:95:b7:d6:c3:03:31:44:1b:2d:
         79:3d:26:30:33:c0:39:58:73:44:51:bd:7d:77:89:e4:67:cf:
         50:c7:06:0e:cf:5b:07:2f:35:56:72:3b:59:43:64:87:7a:5a:
         c1:1f:60:e9:7e:12:7b:55:43:d6:42:d0:dc:0e:0f:69:6a:42:
         29:98:46:51:e1:f6:af:2f:01:d7:09:9b:36:e8:c5:d7:d3:f3:
         50:16:f4:4e:3f:40:fd:d8:e1:0d:da:13:3c:81:4d:8f:e8:51:
         3c:64:51:91:0f:5d:96:65:0a:e8:b3:b8:9c:75:90:d5:b9:80:
         2f:40:ec:31:76:9d:57:10:fe:84:3a:1a:ef:44:2f:3f:84:17:
         f8:82:06:7d:da:5d:e8:3f:67:1a:eb:92:0e:9e:db:32:5a:83:
         77:ff:0e:0d:4c:79:de:10:35:48:7f:f2:8c:20:2c:27:d2:25:
         ea:2f:db:ad:82:d2:61:a8:50:21:6e:8e:33:78:84:6e:bf:6a:
         df:c4:b1:57:5c:86:53:a2:e5:9d:08:b6:38:d1:b6:a2:6e:bb:
         50:c0:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:37 2025 by rpki-client