Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa
File:                     e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa (raw, json)
Hash identifier:          z6gkSu75pqvM0a2z3R2jfcUQF4DM9sJ7kWaDh3VEVQo=
Subject key identifier:   2F:20:DA:60:24:82:F5:ED:3E:07:02:F8:C5:DB:D7:95:3D:AE:B7:84
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858481C9A7E032CCC3486A3EA3F40
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     396131
IP address blocks:        148.77.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7e:03:2c:cc:34:86:a3:ea:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=eedd4a3f-6262-45ef-98cf-6032ad92103c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:ae:de:2e:8c:aa:ca:7a:e1:3c:13:8c:c7:
                    80:bd:32:d6:e1:cf:0d:7a:4d:23:f8:a7:eb:14:58:
                    7c:1c:b9:88:53:b8:c7:d9:af:df:5a:7c:81:65:41:
                    9c:ad:a3:57:f9:04:59:cf:a5:62:28:51:71:c2:eb:
                    a0:76:9e:da:6d:9c:ce:e1:cd:b1:2f:68:25:2c:15:
                    9c:04:8d:d1:53:96:6d:0a:45:f5:ed:cc:90:ad:d0:
                    eb:bb:15:89:1a:c1:78:1f:73:f1:6e:38:65:3f:f3:
                    92:a7:c1:cb:9c:b4:10:18:f4:c9:06:3e:1c:9c:80:
                    6c:b4:e8:13:aa:3c:74:56:94:d3:db:72:fd:91:ac:
                    da:0f:c5:2a:61:34:a9:93:14:c1:29:43:3e:48:20:
                    e0:fa:02:5c:32:e0:ef:fb:d9:ea:6c:c9:30:eb:ca:
                    d1:e5:1d:02:db:5b:a8:66:01:58:db:23:86:84:fe:
                    51:6f:5c:24:e7:55:a8:39:de:07:1a:dd:0f:25:56:
                    f2:60:b6:d8:b1:7c:18:70:2a:eb:d8:04:0a:81:26:
                    ce:fa:8d:a9:86:bc:d9:7a:db:a1:c1:79:8c:46:27:
                    66:e0:51:bc:da:76:ae:8d:5d:38:75:e4:fc:19:e8:
                    e7:f8:83:fd:29:c7:27:1f:78:89:60:aa:4b:15:43:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:DA:60:24:82:F5:ED:3E:07:02:F8:C5:DB:D7:95:3D:AE:B7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:39:42:e4:74:07:af:c6:82:93:04:f4:bc:0a:c3:5b:79:f9:
         bd:68:0a:53:b6:03:8e:e0:0d:61:d7:99:06:b8:99:3c:50:0c:
         0a:9a:11:6a:a4:5d:4e:56:4d:09:c6:56:18:ed:57:49:01:94:
         73:fc:84:73:92:1b:7c:a0:80:7b:3a:48:ea:66:ab:af:7c:25:
         77:2e:71:46:df:fb:9a:7c:33:28:5c:dc:10:ec:b9:5b:28:d9:
         51:9a:08:59:f5:8e:c7:73:4e:a7:47:d2:89:11:0b:1a:0d:2b:
         51:12:5d:55:57:82:a9:b8:0f:83:19:53:21:c7:87:2c:76:bb:
         ca:2e:17:78:bf:42:c9:38:1a:01:5c:22:14:cd:db:56:d9:07:
         e3:c4:c8:27:14:97:5c:62:5a:64:62:e5:4f:8c:ef:9e:2f:85:
         4c:d6:48:ce:fe:1e:e7:20:59:ca:6b:cf:fa:ec:d1:80:ca:e1:
         59:d8:11:8b:21:85:f8:f8:24:dd:8e:cf:33:22:75:c7:d1:fd:
         73:a6:87:91:a8:76:63:1b:2d:f9:e2:1f:51:35:e9:74:37:67:
         da:71:b8:8a:b2:ea:4d:cc:6e:07:7e:66:ef:6b:ef:84:8e:a7:
         63:b7:00:82:11:eb:84:f6:26:3c:5a:0d:fe:e1:51:98:bd:ac:
         b6:a6:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:25 2025 by rpki-client