Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa
File:                     8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa (raw, json)
Hash identifier:          ibTVSx48w0LyK1y+ew3pQRs/5oGnlzbldwTs6Qr/zSY=
Subject key identifier:   18:35:EA:D9:DA:20:50:CA:EB:5C:4A:A6:BF:FA:66:F6:7B:CB:65:E6
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584858A056C294CC2FBA3763D380
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     9025
IP address blocks:        153.46.30.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:56:c2:94:cc:2f:ba:37:63:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=42244c0f-7748-4d61-8d21-1460f18979f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:74:97:26:d5:f0:fa:23:5c:55:bc:a0:b4:
                    ff:8c:ca:01:43:8d:94:48:7c:e5:b2:00:0a:75:1e:
                    bb:ce:8f:e6:96:00:df:ce:4b:8d:d0:9a:0b:ef:0f:
                    94:32:36:f8:9c:a1:55:9d:0a:ae:12:a6:63:5a:c8:
                    2a:ad:4a:fd:e5:d4:b9:a1:f2:fb:d4:3f:f2:37:68:
                    1c:2f:87:64:d5:1b:24:68:4c:95:9a:ad:c2:2e:ce:
                    2b:ce:22:2d:94:a7:c9:ef:19:e2:21:ad:2c:a2:55:
                    10:2f:ef:e8:e4:0e:3b:b0:c9:fb:f9:dd:7d:45:ec:
                    6d:bc:3e:71:19:3b:19:cf:81:fc:80:43:ad:17:81:
                    04:e5:7a:15:d1:94:82:a3:52:d3:2a:d2:b0:e9:14:
                    b3:78:2c:cf:59:0b:2b:bb:0f:3e:f8:6b:8c:18:50:
                    ad:47:e5:bf:d5:d8:ce:4b:b5:94:ae:eb:57:e8:0e:
                    b6:a6:c8:b8:0f:7b:cc:4b:19:58:5f:af:54:8f:62:
                    41:ee:8d:d1:7d:11:10:d6:d0:d4:04:84:95:c6:eb:
                    29:ff:8f:a0:de:46:c9:8b:6e:d9:90:5b:e2:37:f5:
                    4b:db:e0:e0:63:66:35:c8:f7:fb:ef:05:22:cb:7e:
                    65:dc:2a:ec:dd:cb:61:ac:5c:56:04:a2:78:25:ee:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:EA:D9:DA:20:50:CA:EB:5C:4A:A6:BF:FA:66:F6:7B:CB:65:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:61:a4:58:33:60:d2:ea:40:05:ad:93:ea:3b:9e:f9:6a:22:
         ef:2f:6e:52:c6:5e:23:b6:19:1d:76:f3:94:39:0d:00:e9:5d:
         d5:2f:28:f0:95:fb:8d:d5:58:31:ea:53:b0:2c:59:35:29:44:
         cc:bf:5c:4e:e3:63:2d:ac:c2:77:ab:cc:fc:89:43:55:5f:6b:
         1b:98:95:ea:e5:45:86:bd:ee:b3:0f:5b:a7:de:4a:56:0f:d1:
         ac:35:b0:ea:bd:d7:a0:50:30:f6:bc:a1:e0:90:c2:8e:1c:7d:
         b8:1d:50:9b:cd:32:36:96:05:8f:43:60:8a:06:78:41:ea:68:
         cf:eb:33:10:86:de:a5:b3:a9:d2:f2:bd:2f:94:65:90:e8:7e:
         be:18:77:94:92:6e:ae:33:94:c6:8a:a8:c5:cc:cf:96:4b:a5:
         81:2b:bf:e3:db:5f:bc:7a:c6:47:4d:f0:e6:8c:cb:dd:9d:2e:
         7f:4a:d4:97:a9:2c:77:79:6e:18:81:3f:9d:10:e3:f6:4f:39:
         99:72:67:f3:4a:77:e6:b0:ce:67:8f:3b:4b:78:09:b9:71:18:
         e8:02:20:f1:a3:1f:44:f6:78:f2:a4:93:c8:25:fa:55:2b:27:
         bf:4b:99:66:86:43:81:ae:6a:87:0e:22:3a:83:c3:a2:e1:71:
         e1:0a:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:36 2025 by rpki-client