Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa
File:                     de1f14c8-a057-3631-ab65-38bb76a8e939.roa (raw, json)
Hash identifier:          D15GHrFhdJEMWWBlzCYyf2uxoAVxpFZZnPDnRxQl9bI=
Subject key identifier:   68:4F:0D:44:6E:17:D8:FF:C8:CA:98:7A:70:2C:A8:67:AE:B9:D2:F7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584839EAC927A2514889E40C5700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     40934
IP address blocks:        165.254.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c9:27:a2:51:48:89:e4:0c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=2067e160-1687-47d3-9a3a-9865966a2831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:e2:c8:8a:38:bb:5d:4b:6b:2d:5a:68:c8:
                    8d:04:7e:42:70:32:55:71:34:4c:4b:3f:a6:ba:f8:
                    51:08:5d:bd:2a:32:d3:43:e4:90:3d:fc:29:14:c6:
                    06:43:e1:af:c2:80:cf:67:25:69:88:2d:3d:11:d5:
                    27:b1:d3:37:ef:ea:06:ba:de:d5:11:c4:57:36:72:
                    5f:1c:ed:0e:37:49:b3:dd:b5:b4:9a:de:af:aa:ce:
                    be:36:95:c7:04:d8:10:a5:ee:9b:f8:96:ec:76:a1:
                    aa:cb:eb:cb:e6:e3:f6:2d:cf:30:74:f8:a1:51:c2:
                    d6:3d:4d:5f:34:45:5b:7d:0f:46:e7:b0:c2:c7:e8:
                    8c:a1:61:cd:63:0b:5b:f7:44:67:2f:a7:79:58:18:
                    e0:33:b8:9e:13:ab:03:a2:03:7c:02:67:03:da:1c:
                    a4:e7:bb:2b:07:4e:ca:2c:09:d8:cd:3d:90:a1:00:
                    25:c3:41:71:ad:4a:1c:cf:e0:f3:9c:62:ad:de:1e:
                    eb:2e:e1:73:24:1d:2c:f4:cd:49:6d:4a:58:c3:3f:
                    cb:1c:5d:d3:57:72:65:61:3e:3d:7a:b1:a5:54:c6:
                    e6:71:13:43:5f:93:a2:d2:da:9c:11:2f:82:78:69:
                    48:70:ac:16:f7:63:bc:0b:90:f1:21:f3:2c:2e:3d:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4F:0D:44:6E:17:D8:FF:C8:CA:98:7A:70:2C:A8:67:AE:B9:D2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:ad:01:a1:2a:34:c6:33:86:75:54:98:30:77:24:20:39:
         2f:50:e1:9b:4f:d0:ed:9a:2f:d9:2c:0a:6b:07:bc:85:01:b6:
         8c:60:e1:87:18:f7:e5:16:35:e5:7d:eb:3c:7f:9e:47:16:55:
         34:c7:d0:b2:7f:1d:11:10:50:5d:fe:9f:87:f7:dc:1e:8c:de:
         11:e7:f7:c1:aa:46:6f:87:8e:de:ac:26:96:59:42:22:0a:25:
         33:33:93:5a:46:b0:59:57:a1:d7:8c:58:a5:ed:fc:c5:a2:fb:
         67:83:b4:75:da:82:08:b7:6b:f3:2b:ea:fd:2b:5b:b4:fd:8b:
         fc:d0:a1:26:db:ba:72:f5:16:fa:b9:90:39:84:25:bd:ce:91:
         ed:81:a2:4d:2f:60:0b:53:53:e1:60:0c:54:7c:e7:f5:ad:b9:
         07:72:2e:54:4d:c1:30:3c:45:b2:dc:b9:da:b5:76:46:8c:75:
         39:d0:36:57:ca:76:3e:dd:12:52:e6:b9:d3:b4:d8:e4:e5:34:
         03:19:c6:6c:90:8d:29:33:be:8a:f2:f5:cd:fc:8a:37:7d:9e:
         61:cd:97:bd:c7:3a:b7:0c:b5:2b:9e:7e:dd:13:36:e9:2d:f6:
         09:a9:56:6d:13:52:e0:13:55:0c:0c:f3:17:32:ad:f6:bc:9f:
         fb:56:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:48 2025 by rpki-client