Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
File:                     8ae61206-0e3b-306d-804c-13aa3425ae40.roa (raw, json)
Hash identifier:          WSq1jsmjqSCnSTPpiAvnQp5YXv+MV574uRauJ6ndgn0=
Subject key identifier:   86:C8:6A:65:BD:10:C7:4A:06:84:D9:F9:D5:02:C3:6B:31:97:85:0E
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F432858480644FB103E03FFC19685FF80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     7385
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fb:10:3e:03:ff:c1:96:85:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=7cab2172-de06-42ea-ac06-38a585c93096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:b2:80:7d:ae:75:f0:99:7b:51:d3:e0:f3:
                    6c:2e:cf:e0:cd:4e:54:ac:63:1f:a2:18:4f:24:b5:
                    88:2f:bb:e7:24:d9:14:be:e6:ee:a5:ea:b0:9a:4a:
                    3f:de:3a:24:69:88:bc:f2:a2:ac:32:82:31:e7:f2:
                    54:f4:9f:b6:52:80:56:76:b2:de:c4:5e:38:c4:c8:
                    ee:8b:7a:df:90:14:d9:74:da:71:f8:88:e6:5a:cc:
                    6d:95:2d:d8:fa:b7:3e:1e:27:38:0d:70:7d:64:a4:
                    54:0a:04:c9:a9:9a:21:11:0c:1d:87:0a:cd:7a:39:
                    1a:c2:20:41:a9:21:b2:d4:57:6c:8c:8f:42:84:fc:
                    c8:3b:1d:c6:5a:64:a7:9f:42:3e:d4:36:59:0d:a0:
                    60:ac:eb:6e:9c:ee:61:5e:43:8f:74:53:f6:f2:fc:
                    57:e8:2f:3e:b5:69:73:24:0e:e5:32:c4:67:13:b4:
                    34:6a:c8:b5:00:a4:2b:d6:36:ee:cc:73:13:88:c7:
                    c6:26:73:04:54:d7:07:d1:0c:0f:65:34:de:c6:c9:
                    70:01:1c:83:ad:63:36:a5:de:ba:02:67:84:ac:a2:
                    2a:28:56:71:23:86:56:b3:b4:24:57:4c:ec:7a:1c:
                    1c:09:2a:1b:14:16:a4:4e:39:58:f4:41:b1:65:1d:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C8:6A:65:BD:10:C7:4A:06:84:D9:F9:D5:02:C3:6B:31:97:85:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:31:ba:f8:d7:27:8c:1c:6b:a4:af:a7:f2:ba:a1:a9:e7:
         ba:bd:2a:33:8b:97:2e:8d:54:ce:c4:02:55:2a:cb:29:df:94:
         c7:11:b7:50:56:24:10:70:cc:c2:3a:47:61:8f:2f:7c:49:29:
         ed:dc:52:4b:0e:4a:0e:eb:69:55:c6:02:9e:51:67:3f:31:d4:
         f2:27:f8:7a:e0:ca:40:bd:49:6b:0b:fe:95:dd:34:72:55:b7:
         08:50:02:ad:60:fb:d6:e4:5f:8f:13:22:f8:b9:b9:3a:b7:5d:
         67:e8:dc:4e:29:86:e6:a9:60:23:77:85:02:ef:a6:47:5f:41:
         fa:c6:c4:8c:52:a0:5c:d7:da:57:c0:0c:c9:91:d8:25:43:e5:
         eb:c4:d6:b0:1a:73:d9:c4:94:9a:be:f5:d4:74:a8:af:5c:c9:
         ef:d2:da:c5:2d:18:87:2e:9f:40:e9:42:5d:bc:07:68:7b:b4:
         8f:8d:a8:cd:14:cb:39:b1:ce:76:f0:dc:4f:20:80:c4:d5:f4:
         72:4f:a8:b6:29:bc:63:d1:c0:08:be:4d:87:06:7d:91:66:71:
         50:cc:32:e5:62:94:3a:ad:78:ad:33:59:a7:dd:5f:e3:68:6b:
         2d:39:f2:90:57:96:7c:d2:8a:64:32:31:a4:82:d4:e5:88:64:
         17:a9:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:22 2025 by rpki-client