Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa
File:                     f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa (raw, json)
Hash identifier:          BCnj7rmesnE2k1jSg35nzyQiCYxG977uViTUBTYvpsg=
Subject key identifier:   98:24:D3:3A:4B:C9:35:0D:B6:74:24:59:76:A4:D2:09:7B:9C:F4:18
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F432858484EDAC4843DFD529CBF59A200
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        142.54.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c4:84:3d:fd:52:9c:bf:59:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=5e3ad23c-7690-4dbe-875f-33648e26980f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:49:a7:1d:1e:e7:47:c0:ab:61:5c:4c:80:
                    b6:22:69:53:f8:01:7c:c8:1d:9f:1f:b3:e7:c8:90:
                    9c:34:14:85:98:9e:18:f5:92:c5:d2:6f:49:23:77:
                    a9:a9:fa:0b:3d:e7:d4:df:73:af:e1:f3:95:ed:4d:
                    fa:37:fc:3f:49:52:1c:15:eb:03:69:ff:d6:33:45:
                    0f:92:48:09:10:cb:cd:90:85:60:7a:e7:61:47:55:
                    5b:99:1b:4d:a5:2b:05:0c:81:c8:34:db:e3:64:60:
                    b0:b8:13:d3:c3:51:e7:df:c1:63:9e:ee:a3:63:89:
                    75:f8:31:44:f8:08:27:e5:1e:71:9e:88:bd:67:f7:
                    c3:32:87:4f:fc:4e:7e:fe:97:8a:f3:d2:f7:b6:c8:
                    71:ae:89:29:e0:6a:3d:41:28:57:09:ca:c9:d9:d5:
                    b0:51:2f:79:e0:25:fc:0e:6d:6a:04:6d:f5:53:82:
                    e7:d0:38:d5:25:e4:df:68:57:5d:a8:76:24:25:e6:
                    e8:28:40:2c:2e:40:b5:43:6f:ba:fd:b2:30:e0:9c:
                    d5:cf:d6:d3:b4:ff:fc:07:01:89:94:54:d9:d3:67:
                    18:b5:e1:34:71:70:73:7c:1b:03:a5:0d:78:1f:c4:
                    f0:e9:27:5c:c0:41:74:17:68:12:2f:6f:9f:26:f7:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:D3:3A:4B:C9:35:0D:B6:74:24:59:76:A4:D2:09:7B:9C:F4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:7e:97:db:e4:4a:73:8a:d7:20:f1:43:08:96:c8:22:f0:14:
         ac:61:8c:26:e4:13:b3:59:48:54:ef:a8:9c:05:f6:12:ab:c0:
         47:b0:83:e2:48:20:4a:5d:e4:f4:37:2b:eb:56:9d:52:2a:8c:
         36:9e:2c:10:22:55:45:2c:3c:43:be:41:28:aa:2d:bc:73:52:
         8a:45:a9:1d:f1:55:33:45:bd:8f:5a:e5:a6:3a:36:d3:0f:0f:
         ae:e8:5b:2e:5b:91:46:55:d5:b2:bf:0c:0f:07:c9:91:26:f2:
         5d:95:6a:4e:14:8c:98:4f:4f:5c:77:15:d2:88:ad:c0:f5:4d:
         e0:6d:1e:24:35:16:f8:d3:f6:19:8b:dc:8a:74:88:de:4e:93:
         f2:43:e5:69:b3:d6:d4:12:03:61:75:78:db:8d:ce:01:ca:b6:
         26:14:69:17:b5:31:6f:be:af:b7:cd:e8:37:3c:fb:ea:57:43:
         1b:73:1d:2f:a8:01:59:5f:d0:1f:14:74:0d:1c:3c:83:70:bd:
         0b:7b:c0:24:8f:f1:bd:0c:4f:8c:7c:b1:37:1f:d5:9a:2c:cc:
         4c:46:88:3d:d0:36:88:8d:c4:36:5f:8f:9a:3d:d4:c8:93:a6:
         38:21:31:79:8e:f2:65:ff:7d:e6:45:e4:dc:ab:f0:66:f1:45:
         a5:c4:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:48 2025 by rpki-client