Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
File:                     6ac43537-8355-37a7-9a4d-20a26742058a.roa (raw, json)
Hash identifier:          BY1xLy4X2GCLzm5E6Bkno5IMZQWcjemn9fh85SIvrNk=
Subject key identifier:   27:74:C2:95:A7:31:0B:F2:3B:74:33:CA:DB:80:00:DC:43:77:A9:F8
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F43285848159FE80664768DA2082FCE80
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        162.247.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e8:06:64:76:8d:a2:08:2f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=06010c53-705e-4d90-996a-899e67fceec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:c3:e6:0b:50:b4:98:b0:be:61:f1:26:0e:
                    88:88:8c:25:8d:e6:b3:a0:a4:41:a2:5f:59:d4:85:
                    fe:5a:8e:f7:06:f9:8b:8d:6f:fc:12:9f:ab:fd:33:
                    91:ae:48:4d:47:9f:08:55:4d:91:98:8a:df:ff:e3:
                    bd:0b:56:76:c8:fe:46:6d:00:e4:68:c4:38:44:6f:
                    b6:15:5b:fa:51:38:0c:a5:38:00:22:4e:ad:8a:e4:
                    7f:56:00:8f:d8:5a:42:1d:17:9b:4a:b7:0c:26:4c:
                    1e:e5:ac:ed:dc:2b:3c:ca:09:ac:15:a8:fc:55:16:
                    3b:a6:f0:8b:ba:c9:3a:06:f2:72:bc:76:a2:ae:f2:
                    04:2f:a9:22:d5:9a:1b:85:50:aa:d7:d5:9c:32:2c:
                    09:4f:6e:3d:b9:48:d4:c8:65:cc:d7:5e:9f:36:48:
                    15:62:75:9b:3b:0a:95:59:c1:61:4f:b1:da:fe:fc:
                    3b:21:6d:3c:09:02:60:6b:92:89:68:cd:7c:26:26:
                    03:cc:9f:8d:f9:16:ed:ee:a5:3e:ee:31:85:c8:20:
                    fc:e3:87:c8:21:06:d1:64:aa:97:7a:e9:18:15:bf:
                    5e:c5:cf:39:11:68:5e:6e:ab:5d:65:39:06:74:49:
                    20:46:d8:90:fa:16:d9:e8:cc:b1:ce:a4:7b:44:49:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:C2:95:A7:31:0B:F2:3B:74:33:CA:DB:80:00:DC:43:77:A9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:f0:11:c9:99:24:ec:0b:8c:15:90:d8:7d:47:1b:7a:d7:
         0e:ed:14:7e:3d:af:27:8e:ca:b1:68:12:4c:13:39:27:bc:a2:
         2d:d3:1b:e7:9d:f2:dc:20:fb:11:27:7e:b9:2c:59:2d:24:d6:
         bc:15:73:7f:9a:e2:5b:39:0a:d3:a3:6b:c4:67:fc:7b:c7:84:
         91:b0:64:bb:35:5e:19:11:13:da:49:c6:72:7f:f6:ef:40:89:
         18:47:cd:db:d0:a2:ce:ae:76:e3:60:0a:ea:87:1d:4c:61:b1:
         5d:47:93:db:c0:21:e8:41:4d:5c:09:0d:a5:89:25:c1:8f:81:
         f0:0e:80:94:4f:b3:a4:c9:af:a9:a6:18:59:73:30:92:7e:1e:
         cd:d8:ea:02:37:5a:78:3b:05:0f:0a:35:5d:46:91:13:8d:9c:
         39:20:df:4a:6f:80:5f:c5:f8:b1:da:0c:a3:f8:b3:3b:06:13:
         55:9a:de:f6:f4:ea:68:90:7f:0d:78:f0:f2:6a:8c:1c:74:e1:
         f5:71:00:01:38:8f:72:b2:80:f2:0b:81:d1:fa:43:48:af:32:
         e1:5f:87:00:99:f6:50:79:c9:34:51:26:3a:53:a8:6b:7c:cb:
         53:9e:58:f8:a7:4c:55:46:46:5d:4b:7d:b7:f5:4c:08:e6:c6:
         42:9f:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:12 2025 by rpki-client