Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa
File:                     8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa (raw, json)
Hash identifier:          Sof/kfFnvmynrnjRgk/MuZr8zLEGf3bnEXWUYKRonhU=
Subject key identifier:   24:46:E7:38:C4:18:FF:7A:FA:9C:20:1C:8C:81:BA:B8:71:A1:54:26
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848143A82B7066F46028188B8A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     3477
IP address blocks:        192.149.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:82:b7:06:6f:46:02:81:88:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=54f200b6-32aa-4fa7-85ea-aced1bec445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:be:04:87:3b:f7:0e:d1:85:2e:c4:20:54:
                    71:0a:2a:7f:51:be:5b:d0:52:a3:a4:9e:2c:c7:60:
                    26:26:ab:a1:88:42:f3:ee:c4:ff:bd:84:b7:ec:b6:
                    59:f6:23:2a:34:4c:3a:48:c5:c3:5c:f0:d8:21:93:
                    1b:ca:4c:1a:70:bb:3b:c8:86:22:59:f8:33:71:50:
                    d9:a9:23:61:ae:a9:31:2c:69:00:02:ba:81:8a:26:
                    5f:97:84:fc:05:e1:75:2c:08:54:ec:55:72:78:01:
                    f2:37:fd:d9:7b:bf:2a:6e:c3:d8:a0:6a:9a:c1:5d:
                    44:ab:ba:5e:1c:ba:9a:0f:79:30:70:e8:47:41:82:
                    03:ec:de:1e:b5:f4:a3:99:32:97:60:3e:93:35:48:
                    d9:00:13:2f:29:5b:5e:ad:84:11:3b:1c:8d:f5:91:
                    92:29:0c:51:ba:be:6c:25:89:f5:77:ab:a4:2d:2f:
                    25:26:12:eb:39:02:38:4c:b3:b1:09:2a:e3:58:ca:
                    1d:e8:28:bc:47:5a:f8:f0:8e:29:43:03:50:83:33:
                    ac:ab:84:ef:81:8e:70:62:e3:0b:a8:4c:13:90:72:
                    87:28:bc:70:45:64:7c:e0:52:25:7a:dc:3d:11:f6:
                    63:94:b8:47:02:34:b1:35:97:28:7b:2a:29:06:b1:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:E7:38:C4:18:FF:7A:FA:9C:20:1C:8C:81:BA:B8:71:A1:54:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:27:a3:24:7e:23:9a:a4:d7:25:08:1b:1c:60:5b:5c:f9:
         61:ce:c4:17:ae:ae:b5:ee:bf:b7:b7:0e:23:28:03:5f:3a:06:
         83:dc:42:8f:ec:fe:40:ff:83:62:43:b7:4b:61:66:8c:6c:e6:
         10:07:af:14:9f:cf:2d:19:09:fb:aa:0f:91:83:75:a0:ca:ce:
         48:9f:aa:cd:49:e2:8d:b9:a2:63:9b:14:42:1c:66:1e:d2:c4:
         76:97:b7:83:95:55:e1:92:69:2d:79:ee:2e:52:c6:2d:25:51:
         43:43:77:de:0c:18:48:6f:ce:4e:fa:18:78:55:18:ef:7e:3d:
         c8:a7:66:c8:fb:96:9c:28:24:2c:7d:a5:31:03:93:60:51:9d:
         63:85:8c:c6:59:b1:b5:4f:d9:47:5e:ac:cb:3a:85:72:aa:f2:
         49:f9:20:91:ec:d9:bc:80:84:58:c4:e4:88:8b:d7:cb:b2:c2:
         5c:37:a8:6d:a2:ca:52:ff:a5:ed:0d:e8:c7:56:b1:7d:f4:55:
         65:e1:64:47:0e:32:93:3d:99:18:44:0d:ef:d9:53:65:26:cf:
         0a:d0:c2:ce:ab:ec:78:3e:0b:8c:84:63:0c:65:ab:b2:95:82:
         31:dc:f0:b1:d6:3c:ee:ef:4d:fc:9c:35:c0:69:dd:db:b2:4b:
         bd:26:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:34:18 2025 by rpki-client