Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
File:                     fef7f89c-5424-30b1-8308-96892e1bf91b.roa (raw, json)
Hash identifier:          df1khY+TF2QiEvXio9ffEv6t5vBXeoaleyYSSajbV/E=
Subject key identifier:   A8:20:68:3B:69:AF:3F:92:D4:EB:42:B7:3D:18:70:69:FF:60:E6:52
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285848037B6DA9F73D2DCA1003D300
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     396042
IP address blocks:        148.76.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6d:a9:f7:3d:2d:ca:10:03:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ea8fd597-67e5-4648-a848-93b173b8814c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:22:73:7b:6a:73:cf:10:05:76:de:bd:b0:
                    73:59:92:dd:7e:c4:83:9b:1d:fd:0f:3e:25:49:cd:
                    73:79:bf:5d:c3:18:aa:c0:3c:96:1f:28:72:d7:28:
                    c0:e3:d1:d0:16:4d:0b:1e:19:95:51:17:23:3b:15:
                    a0:47:de:14:2a:c5:23:87:df:51:75:6d:a2:fe:57:
                    0c:fd:32:47:c6:a3:2e:27:d4:26:d0:81:5b:fe:b7:
                    ed:97:9c:d2:97:3c:62:a8:23:db:9a:5a:77:f6:44:
                    e4:a5:b4:f3:75:e4:57:95:f5:63:07:f8:54:89:0a:
                    ec:ed:05:83:41:e3:82:d6:9e:ba:ba:7e:20:5d:f3:
                    26:63:e0:e3:75:ef:06:07:76:92:d7:93:b0:fb:b5:
                    ab:95:32:40:83:7e:7f:58:02:87:b0:d1:36:6b:10:
                    4d:29:40:89:63:66:a7:0b:7b:a8:81:e7:c2:24:47:
                    4b:3e:06:1a:bf:42:9b:b8:e1:6a:dd:7a:8c:81:2a:
                    2f:67:86:4c:fa:7e:d5:8f:47:cd:1e:e2:47:6d:a4:
                    2d:76:ca:c8:0e:79:15:2e:7f:70:9f:24:aa:a3:c5:
                    82:a4:11:c0:64:bd:9b:ff:ae:f0:3f:87:73:ff:01:
                    b7:3a:b4:00:05:bb:79:f7:8b:b3:c9:be:29:8e:40:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:68:3B:69:AF:3F:92:D4:EB:42:B7:3D:18:70:69:FF:60:E6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:95:14:a1:03:4d:b9:bd:3c:68:2c:90:de:2d:94:9e:21:
         ec:a9:5e:20:aa:18:28:f4:70:6a:ae:51:48:b3:f2:5a:52:b2:
         9b:5a:92:e4:1d:a0:ee:a8:48:db:08:dd:0b:ba:b9:7d:7a:5c:
         0a:8f:fd:66:b7:9e:70:1d:13:53:5b:ef:3f:53:0c:1e:9b:44:
         64:bc:ac:7b:92:24:2e:b3:dd:e5:42:52:3b:11:f2:46:d5:b4:
         1e:3f:56:6b:f3:1c:1c:74:1d:0f:2f:bc:68:91:09:9f:87:fc:
         94:a5:59:f8:f6:3c:6a:46:18:d0:f2:bf:fe:05:8c:96:30:fe:
         14:76:9c:27:20:8a:dd:6f:82:d5:46:bf:79:76:1a:55:6a:4d:
         98:ae:45:16:5d:4f:f1:57:aa:34:b8:f8:38:10:d2:ae:72:f2:
         78:69:b0:89:77:4b:73:2d:34:1d:39:42:48:6d:6b:8e:d0:4e:
         3f:89:1b:52:59:96:7a:57:dc:37:18:64:27:fb:c9:1e:d3:16:
         90:df:d2:0b:90:5d:90:e2:47:ce:96:6c:34:9f:9b:ed:ac:81:
         c3:c1:0e:3d:94:11:47:3e:da:db:71:d0:72:83:c3:a6:31:00:
         91:26:ec:60:d6:07:9c:02:12:1f:e1:6f:27:d8:d4:61:54:38:
         6c:c4:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:36 2025 by rpki-client