Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa
File:                     ef439424-fb59-394d-acb6-f9d205d96ace.roa (raw, json)
Hash identifier:          t6Pj0UwT8tTe5ertll1jHT8s4j31vVs7XWjogSsZ7ls=
Subject key identifier:   AA:1A:8D:2D:9C:0C:19:5F:6C:F5:7D:C7:29:B0:15:47:13:20:CC:AE
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F432858486695B88F55DFEB2D7622E280
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     23154
IP address blocks:        143.116.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b8:8f:55:df:eb:2d:76:22:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=86b7e52d-6a5f-44cd-a32a-4f6f1b51561f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:e3:e6:99:1c:d4:10:a2:4b:e6:50:83:72:
                    9e:de:52:31:d2:6b:10:00:99:45:81:52:17:2d:0e:
                    66:85:3c:2c:63:4c:9c:f2:31:ea:b9:90:3f:7a:eb:
                    5c:a5:f4:38:b5:7d:1f:b6:9c:c5:de:67:f4:64:85:
                    2e:59:ee:06:08:47:bf:55:3c:6f:6a:db:fd:87:73:
                    44:73:c6:91:d5:6c:57:c0:a2:11:a5:34:3f:52:fd:
                    b9:41:b2:56:9e:fa:b9:dd:24:8b:30:4a:ae:84:b7:
                    e2:45:0a:d9:ec:ad:2e:4e:d5:68:a6:59:6c:65:64:
                    9f:ff:76:b7:53:2b:14:59:1c:2b:85:c4:3c:60:65:
                    1a:01:5b:7b:ff:0e:eb:03:6b:50:d8:ed:fb:9e:48:
                    6e:37:51:a1:d3:a3:c8:dd:df:ac:ea:f9:6a:9b:a2:
                    00:dc:22:21:c6:d2:51:64:9e:3b:a1:b2:b7:ff:b8:
                    14:ab:d2:c0:ab:43:69:9b:f4:5e:49:84:51:9a:37:
                    be:ae:9e:b3:07:2c:4c:ae:f5:d4:a6:30:9d:4f:9c:
                    e9:1a:a6:cf:12:32:36:a6:d1:d2:43:31:5f:f6:56:
                    ab:33:ab:7e:85:71:ef:92:5f:75:e9:5d:d2:e4:ea:
                    6e:78:8c:6c:f7:c4:20:ce:17:e5:8f:b2:04:14:1d:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:8D:2D:9C:0C:19:5F:6C:F5:7D:C7:29:B0:15:47:13:20:CC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:74:2d:29:1a:3a:2f:1e:f9:8e:db:ea:e3:14:61:c8:fa:4a:
         60:6a:15:0f:03:05:e8:67:ed:72:d8:07:1a:df:14:10:5d:1b:
         89:fa:8b:43:6d:e7:58:1d:72:b0:4f:73:93:52:11:8f:9b:9b:
         c6:27:12:06:9f:28:d0:ae:eb:d3:a7:21:86:8c:70:a7:28:1c:
         da:f2:73:f9:8f:40:5c:36:c9:32:87:6a:06:56:df:d4:ad:ae:
         44:f7:9a:5b:fb:15:37:11:08:4e:c4:37:4b:4f:03:9f:5e:6c:
         d6:a2:ad:52:c5:a5:73:7c:87:06:47:02:7a:32:3f:5e:a0:85:
         ea:0b:40:37:58:8b:f9:16:fe:35:46:66:1d:30:a7:98:a6:a0:
         ce:49:b5:2f:3d:53:5f:ad:31:e5:f8:4b:22:20:02:9e:c1:14:
         4f:d1:7b:36:de:53:ee:8f:19:63:dc:e4:7a:26:ab:b3:c0:b3:
         1a:6f:72:4e:57:2c:11:3e:38:43:11:70:a2:83:54:64:f2:2c:
         6e:7d:fc:19:5e:36:f1:27:11:94:51:d0:bf:c8:e5:f7:27:83:
         17:b8:29:5f:c3:58:e4:53:c1:ed:fe:61:a5:6f:b5:a5:9f:0d:
         52:7a:aa:62:66:fa:1d:f7:1c:0c:04:f4:6d:8c:90:40:79:7c:
         5a:6c:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:43 2025 by rpki-client