Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
File:                     5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa (raw, json)
Hash identifier:          RtZzPiiTrkwWdK4AA+YRUjoq3mDTj3HRBJaB98CqmD4=
Subject key identifier:   19:63:2A:14:CA:22:F1:BF:44:94:68:1E:C9:3A:A1:EF:AD:82:FF:4C
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F432858480644FB5F635D571223694B00
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     812
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fb:5f:63:5d:57:12:23:69:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=4f588b03-8737-4444-ba42-dc31135b81dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:26:8b:b4:7e:d1:19:fa:e4:6d:8f:a0:85:
                    a5:62:4d:74:70:7d:a3:77:8f:51:3f:05:a4:37:76:
                    89:c9:d4:a3:72:f7:7c:9d:8a:2f:10:41:f9:21:14:
                    d7:ce:bf:14:b2:ea:62:2b:47:f2:ed:91:28:da:34:
                    21:d0:40:93:ee:44:c5:60:c6:fc:d8:45:2a:2f:35:
                    fa:63:d4:cb:d6:11:5c:0f:1e:61:af:7f:ba:9f:58:
                    f4:ec:9b:31:46:21:b9:81:22:a7:9c:e2:d8:3f:f8:
                    ff:20:6e:0e:4a:0f:ac:a9:1a:78:62:71:15:97:75:
                    09:4d:fe:ba:fe:4c:d3:f2:1f:bb:a3:33:86:2e:72:
                    ac:1c:80:87:58:ee:b9:d0:68:67:44:64:b8:d9:4b:
                    da:bf:37:57:49:46:a5:ec:81:64:2a:d5:89:87:d3:
                    8d:9e:cc:55:83:87:f9:19:64:4c:74:42:17:d9:bf:
                    69:5d:2d:4a:6e:4c:06:bb:74:01:8e:37:15:db:3d:
                    47:ee:bb:2e:25:3a:28:61:28:2a:2f:97:93:98:6c:
                    33:63:94:f7:8c:5d:2e:ea:73:6d:36:46:f3:ce:1e:
                    83:c8:f3:15:c3:70:5b:0f:7b:02:6a:52:38:4e:d1:
                    d3:96:07:95:7c:1f:13:da:eb:75:76:f1:8a:c2:97:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:63:2A:14:CA:22:F1:BF:44:94:68:1E:C9:3A:A1:EF:AD:82:FF:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:01:4c:50:7c:68:75:cb:18:c5:1a:34:bb:8a:53:8d:f1:
         f9:81:93:d6:9f:7b:53:e7:89:03:75:83:8a:97:8f:f1:9d:16:
         45:59:5c:f4:3c:64:5a:92:36:91:a2:57:b5:a1:30:b6:cd:92:
         5d:3d:fe:8a:d9:7d:87:a3:cd:35:f7:58:38:be:3a:24:64:0b:
         04:f0:3c:66:98:7d:ea:f7:96:0a:f3:e7:24:30:14:c9:d4:7d:
         27:9e:72:4f:56:77:59:2b:e6:49:18:1b:c9:9f:8b:0f:b6:a8:
         3d:07:46:91:c2:7f:45:db:97:90:c7:7d:0a:39:32:3d:52:7e:
         ee:22:92:e2:3e:5f:2e:26:01:fa:9a:eb:8d:b0:66:85:55:d9:
         36:1c:12:96:6e:a8:3d:12:46:92:1e:b4:cb:70:0b:df:d1:8b:
         09:69:36:38:d4:c1:27:b7:8a:6b:2d:59:88:5a:34:09:ee:74:
         84:73:1b:d6:8f:e3:25:32:66:71:a0:90:fe:7f:ce:99:6a:a9:
         bc:1a:cd:ae:b7:c3:48:e4:5b:5b:f3:6c:c3:3a:cb:ab:20:b7:
         16:7f:f1:b6:67:4e:b0:f1:c0:54:92:f0:9c:21:6c:95:96:7c:
         2d:c0:4a:8c:e2:5f:cb:6b:c8:7d:05:01:fe:28:5c:cb:ba:b8:
         f4:0c:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:42 2025 by rpki-client