Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb414b8-f039-3178-8db2-efe901bbe0fa.roa
File:                     acb414b8-f039-3178-8db2-efe901bbe0fa.roa (raw, json)
Hash identifier:          Opu+GAy+i3UvQFKmYMwj0s+ZG3B/42lBYcPrMRuSqhg=
Subject key identifier:   09:4F:31:7A:2A:52:9B:2B:7D:8C:84:4C:78:4E:F6:CE:8F:B6:CF:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143D8771B4806822BC9FFF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb414b8-f039-3178-8db2-efe901bbe0fa.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        24.2.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:87:71:b4:80:68:22:bc:9f:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=8f706db1-2754-40c7-83b7-8b0a1cb3972f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:5d:1e:e4:63:c9:30:f0:c9:32:e8:9a:7e:
                    33:79:ca:b2:16:87:8d:f6:04:c5:46:e5:a4:a6:e8:
                    22:f5:3f:c3:cd:8c:14:9c:0e:34:2a:12:bd:bf:f6:
                    0d:49:fa:51:d7:0e:ef:10:86:6d:a0:00:2f:83:e2:
                    09:74:62:7e:1c:2f:2b:b3:7c:48:0f:a6:09:48:fb:
                    80:48:fa:a8:3e:d4:19:5e:50:84:d1:ca:b6:b1:85:
                    2a:32:8c:68:64:7a:71:b1:1e:1f:ac:66:48:f5:61:
                    da:e6:bd:cb:e9:6a:13:78:2e:5c:b6:49:75:af:47:
                    88:a3:f5:29:02:15:d1:08:76:d1:56:13:4c:55:3b:
                    55:b8:c2:89:dd:5e:90:98:c5:45:52:44:4b:1f:c5:
                    94:85:2e:ff:c8:1d:e6:3f:85:11:35:73:ed:b5:9c:
                    ca:ba:cc:20:8a:7e:f9:d7:c4:94:99:e7:7f:b9:4e:
                    52:d4:6f:cc:0e:96:96:cd:2d:4e:89:ab:78:d8:34:
                    0b:c0:94:1c:83:a9:26:ad:ef:8a:cb:cc:4e:82:ae:
                    89:e4:01:4f:48:f3:15:5b:6f:1f:6e:97:c7:96:b0:
                    28:93:e7:9e:35:ad:11:a5:bb:85:91:fd:51:0c:90:
                    6f:58:8f:0b:5a:23:9e:06:d5:45:3c:da:6c:3f:1f:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:31:7A:2A:52:9B:2B:7D:8C:84:4C:78:4E:F6:CE:8F:B6:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb414b8-f039-3178-8db2-efe901bbe0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:de:e0:7f:e2:19:21:66:72:e0:b0:fa:27:cc:29:57:39:
         d7:84:07:4f:b0:1e:17:a8:cb:16:3c:6d:ad:61:4c:11:a7:d8:
         6d:ec:ea:f3:75:af:3a:0b:22:55:55:e2:92:77:32:cd:25:6a:
         de:7e:53:81:25:51:87:60:7f:4c:f6:f7:cf:a8:50:79:0b:65:
         9e:03:5f:b8:7c:5b:5f:92:49:23:4a:26:90:b3:24:49:31:77:
         00:dc:0a:e9:6d:52:2a:ee:2f:08:4a:01:57:b9:f4:8c:78:b4:
         c0:85:90:6c:23:26:60:bd:4f:bc:79:e0:ed:91:16:f2:88:fa:
         07:49:84:21:6d:5b:85:84:40:9e:3f:ec:bb:7e:bf:6d:d8:76:
         94:eb:30:73:89:d6:db:68:36:69:bf:7f:c4:8f:60:91:55:b7:
         84:c6:9c:96:a9:41:9d:8b:52:68:aa:ce:4b:fe:15:49:6e:2a:
         1c:12:1b:fa:04:61:c7:05:68:14:7b:9f:af:32:c8:a0:25:16:
         2f:39:b8:1c:03:45:13:5f:08:a5:bd:31:1e:70:23:02:40:d5:
         f6:a7:e8:78:11:22:af:90:5b:7e:d5:ba:79:22:df:f5:75:5e:
         68:bf:c1:f6:a2:73:a2:08:a4:c0:bf:42:8d:5f:6d:34:6c:c3:
         5c:70:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:23 2025 by rpki-client