Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa
File:                     11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (raw, json)
Hash identifier:          UmVrQlhPNoFfByRN2tZrqdHmmPlhgU8QFPWoDesCWxM=
Subject key identifier:   F8:5A:17:5E:8D:2E:67:33:33:16:4D:FF:6B:D1:F0:9B:DF:93:FB:73
Certificate issuer:       /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial:       010D0C9F432858486D90478EAA81E013AF52A280
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     19905
IP address blocks:        144.29.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:47:8e:aa:81:e0:13:af:52:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=c59f6f2f-54e3-47fb-9c33-414e3423fa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:58:e3:de:87:28:08:7a:e5:be:d3:f8:aa:
                    8a:a8:27:c2:90:9b:14:d6:6f:8a:21:73:5d:4c:80:
                    e5:8d:2b:12:47:b7:30:a8:67:cc:36:0b:2a:64:35:
                    e6:dd:20:ed:e2:27:fe:a1:53:d7:cd:9c:c0:3e:16:
                    7b:37:c2:df:20:d9:53:3e:9e:16:a4:ba:88:85:e6:
                    02:e6:83:0f:cc:db:f5:69:b4:d9:d7:0d:eb:0a:cd:
                    f0:38:76:c3:f2:f8:b7:7c:d9:0c:e7:81:bd:94:81:
                    63:48:09:32:7e:da:26:77:6d:85:e7:ad:66:cf:44:
                    e3:10:24:eb:9f:1f:57:81:51:ae:35:69:04:52:fb:
                    f5:1e:58:f8:06:e3:f8:4d:ce:a7:d5:01:a0:76:d6:
                    9c:ed:b0:69:4f:f8:17:85:78:ce:05:d0:3e:e8:88:
                    4c:5e:e3:ae:8f:35:fb:2d:41:78:dc:73:88:c7:50:
                    c0:58:2f:c1:da:94:4c:9b:22:69:7d:a9:47:ba:70:
                    54:10:1b:c7:0e:b7:7a:3a:61:1b:4b:8f:22:f0:f6:
                    59:54:60:cf:e5:f8:55:af:99:97:8d:06:8c:7a:2c:
                    79:b9:a4:8d:ec:e7:aa:13:2a:ac:d2:78:25:1a:2f:
                    1f:77:6c:db:b6:fa:35:bb:72:ff:3a:e5:d4:fb:b9:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5A:17:5E:8D:2E:67:33:33:16:4D:FF:6B:D1:F0:9B:DF:93:FB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:a3:e8:ff:89:92:c4:e6:22:1c:27:7e:cc:7b:9b:79:7b:
         7a:22:33:b2:86:5c:d2:53:aa:81:71:92:e8:a1:52:3f:db:22:
         00:b4:0a:79:3b:cf:4b:dd:a2:6e:b7:47:71:fe:ce:6e:0e:76:
         1f:f8:41:fa:8f:ea:b5:47:bf:54:46:1a:72:66:02:46:be:3e:
         c0:75:4f:23:d5:10:e6:e4:86:06:f1:4d:34:9f:49:4e:86:49:
         45:0e:37:52:91:6f:02:ec:75:bb:49:20:43:41:80:b7:56:97:
         2b:43:2f:b5:5a:a1:db:c2:82:9c:a5:d6:6e:eb:af:c6:75:f3:
         28:e7:90:ef:25:94:e2:de:4b:74:e5:14:7e:f6:63:c7:20:46:
         4b:36:77:a1:51:e2:64:b8:4b:4a:44:0f:d8:92:52:28:7d:e7:
         fa:f4:a4:27:d3:13:4d:a8:81:d9:ba:0c:1d:13:a8:ea:cf:b8:
         36:1d:e5:88:be:71:bf:ff:74:3f:b8:80:1f:0e:9e:9b:74:a5:
         1d:92:5c:79:b6:83:2a:f4:97:ac:37:47:b3:92:a2:49:b6:87:
         58:0e:6f:df:69:c6:98:f0:75:f0:7f:9a:f9:81:bb:3b:f5:df:
         0a:62:5b:b1:a5:0b:9a:6c:a0:2f:c4:70:80:f9:0a:ea:b6:62:
         05:53:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:30 2025 by rpki-client