Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
File:                     f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa (raw, json)
Hash identifier:          VHWck4XsuJQ8XRC3I1P23LFIen7ECUPXwSaTysoFsOQ=
Subject key identifier:   2D:8C:16:E2:E8:0A:7D:DA:94:FF:EE:B7:2E:07:0D:DA:AF:75:81:D1
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858482EBFFAFD5AD4136782808F00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        143.244.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fa:fd:5a:d4:13:67:82:80:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=5d3e456f-17ae-474a-aa93-0a53b8722309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:01:d8:43:1a:9d:de:5b:df:90:bc:e8:46:
                    53:92:a4:5f:40:a3:3d:fa:fb:52:c0:41:99:27:a6:
                    a6:7d:93:95:ee:6b:ac:e6:32:0d:bc:ed:d7:a8:83:
                    78:c4:a1:1e:d1:b9:6d:fe:5a:9e:d5:ab:4c:79:46:
                    8b:4b:b4:27:9d:8b:c8:ce:87:03:e5:8d:5d:54:0d:
                    8f:b3:50:f6:35:fc:7c:09:ae:b2:4d:dd:84:b8:c3:
                    60:38:5c:2e:af:2c:12:30:8c:37:a5:b8:1e:20:42:
                    25:13:00:4f:51:5f:73:aa:29:62:fc:76:c9:1f:7e:
                    8c:8d:17:b3:e7:7b:15:3c:40:da:ab:f4:e1:7a:1a:
                    d2:24:46:d7:13:22:5e:fe:c5:74:bc:ad:23:db:92:
                    85:0d:82:11:a9:38:d7:02:cd:2d:1e:c0:08:f8:72:
                    a7:04:30:73:97:e3:fd:a5:e1:e2:9f:64:05:bc:6f:
                    00:65:7d:22:18:c4:77:d5:e0:fd:65:87:f6:ca:3f:
                    c5:ec:c3:93:5f:89:b9:f9:ee:c7:3c:fb:2d:ca:ba:
                    6f:e1:6d:35:fc:03:2e:5e:6e:d2:dd:7e:89:ec:9e:
                    68:a8:fa:ce:7e:ea:ad:19:0e:c3:09:fd:83:cf:d2:
                    70:9d:c1:cc:15:a3:b1:76:82:40:75:05:8b:a9:4e:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:16:E2:E8:0A:7D:DA:94:FF:EE:B7:2E:07:0D:DA:AF:75:81:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0d:57:d3:4f:95:eb:28:c8:98:09:4c:e6:8f:5c:27:ff:36:
         57:92:e0:43:ac:47:70:6a:50:6f:64:88:c0:0b:8c:44:27:49:
         f5:97:3d:da:db:fc:04:62:91:01:b5:17:21:7e:ec:ef:7b:42:
         59:3a:f2:9f:9d:98:49:a5:d7:e8:09:46:49:a6:bd:df:c3:6d:
         20:a4:e6:ac:fc:3a:1c:c7:c6:0b:65:0d:dd:7b:37:ab:89:01:
         f0:18:40:77:4e:20:d0:e2:df:bd:1f:5f:bf:cd:d6:26:1f:69:
         eb:4c:ba:b3:6a:4c:3b:42:22:fc:bd:91:f6:b0:1a:2f:3e:22:
         0f:19:74:c0:07:0a:ff:e9:2d:ba:c8:fb:db:44:11:2c:c6:6b:
         4b:91:91:7d:71:e9:00:ed:00:87:5f:66:1a:1c:8f:97:c7:5b:
         63:6f:88:78:e7:e2:a9:12:84:e0:5c:8d:32:6e:8f:e3:61:ed:
         4b:78:1a:40:82:25:dd:98:04:75:a5:75:4e:de:c4:96:54:56:
         41:cc:76:f9:0b:81:10:c7:7b:0a:22:3c:31:6f:10:a2:07:2c:
         00:1d:48:e7:19:24:1d:4b:72:89:ca:ee:a6:fd:d7:59:90:b1:
         c8:88:3a:c4:d1:9a:1c:d6:95:ab:46:f7:a6:3f:53:e3:f9:1e:
         2e:4f:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:05 2025 by rpki-client