Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa
File:                     012484a9-0279-3886-a0b2-d1d4b6271aa7.roa (raw, json)
Hash identifier:          obM4ho9WEiGkroNZKIZ73IiA2pllJSv9MC3aoJpFtlk=
Subject key identifier:   29:32:82:E8:1A:A7:98:0F:67:92:8A:B5:A5:9B:22:37:B3:92:45:30
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285848143A6C983E5FD9910C32A440
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     14618
IP address blocks:        160.153.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:6c:98:3e:5f:d9:91:0c:32:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=0c3b0ec6-fbde-456e-be6d-6f74efae6518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:1b:bd:f2:85:ed:3d:c3:97:3b:00:cf:82:
                    54:57:84:1b:87:c3:e5:db:68:aa:ba:db:b0:45:db:
                    81:bd:6f:61:2b:13:c9:b4:69:82:49:b7:54:64:0c:
                    59:53:ad:bf:18:e6:0c:5d:c9:42:fe:5b:38:4e:5b:
                    9d:e3:bc:f3:67:b4:32:b2:b1:b9:23:58:62:79:d4:
                    45:0e:e0:e9:43:07:92:8b:77:1d:6f:40:92:50:e4:
                    f1:d6:55:84:d6:79:07:4c:09:c4:3d:b1:ab:f3:21:
                    0c:fa:62:02:a0:ea:48:06:c0:1d:8d:0c:bc:54:e8:
                    bb:01:81:81:da:db:ac:6a:b0:89:d0:d3:cb:f5:74:
                    ab:dd:d2:23:f4:41:98:b1:5a:f5:38:6e:9a:bf:77:
                    e9:f6:c3:07:6b:c5:71:fa:84:45:cb:3d:3b:98:6d:
                    3e:b4:28:b1:04:ae:e7:16:74:fd:98:76:58:38:09:
                    b3:87:15:94:e8:99:a1:9e:c9:be:95:38:0d:47:29:
                    31:cb:00:db:05:b3:8b:8f:75:4c:9c:1b:f0:62:89:
                    79:1f:70:0c:73:d8:a9:a1:87:64:fa:9f:86:f7:3f:
                    00:23:32:49:b8:13:cd:30:83:e3:92:b0:10:96:16:
                    39:db:49:2d:8b:d2:2f:5c:37:f8:56:55:6d:d6:0d:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:82:E8:1A:A7:98:0F:67:92:8A:B5:A5:9B:22:37:B3:92:45:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:77:84:4c:66:43:8f:1a:b7:b8:96:fb:e8:54:e8:7a:c1:50:
         7e:29:64:9d:f8:a1:ee:57:b6:58:3d:45:96:70:30:87:d3:56:
         b2:ea:ff:b5:a8:24:40:bf:c6:ed:38:8a:98:42:e6:7f:a1:c9:
         10:ae:1b:e5:2c:8a:ce:83:30:09:1b:d6:53:0a:f6:7b:8b:ed:
         04:8b:4f:64:bc:fa:35:3d:2f:7c:18:64:1e:fe:65:27:d4:4f:
         cd:33:4d:14:50:5c:b3:f0:4c:6d:e4:a4:80:de:7b:8c:45:27:
         a9:7b:10:41:d5:0a:53:29:c5:0d:3e:8f:d1:0a:35:98:a3:09:
         82:99:df:e8:d3:50:1d:81:10:45:7c:2f:21:c1:a0:18:76:67:
         8e:9a:95:be:19:ac:11:cd:9c:a5:85:9f:bf:fd:06:7f:37:79:
         f8:31:9f:65:0f:29:aa:ce:76:24:d2:d8:c4:6b:f9:93:11:4f:
         9c:19:b3:f7:3b:91:34:21:a9:a1:2e:7f:5d:50:ed:e8:f1:b3:
         02:c7:ec:ec:fd:ef:2a:f9:e1:b8:65:ee:9f:2c:18:27:88:8d:
         b8:ff:60:13:ce:7c:be:10:81:f6:f1:cf:00:7b:c9:5d:16:ab:
         0a:eb:64:ca:e2:24:16:4d:0f:4b:a3:9b:6f:3d:bf:03:4b:b7:
         eb:43:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:04 2025 by rpki-client