Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
File:                     873d4b38-1604-341a-a8a0-f8b12792ef66.roa (raw, json)
Hash identifier:          HCa7NcxNoUb9Epy5rSw/64WzxnQIpheZPIKvcq1W+/s=
Subject key identifier:   D1:7A:9A:34:3B:7D:8A:B3:7A:49:51:4A:C6:44:64:E6:5B:07:8A:22
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858481C9A96F0435B8EE5AAD10400
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16696
IP address blocks:        148.59.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:96:f0:43:5b:8e:e5:aa:d1:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=884dde34-d477-4319-afcd-dac88633da3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:37:c6:bf:ae:37:57:4c:be:d4:50:15:ca:
                    e2:1d:29:b7:dc:1e:1a:43:fb:8c:c4:f7:e7:00:43:
                    1f:d8:07:05:03:a7:ee:35:db:f9:55:a0:33:d3:ee:
                    13:24:df:59:b2:e8:b7:37:b1:73:44:9c:49:d6:d5:
                    b0:43:99:25:a9:e4:02:e4:e2:0f:eb:c3:98:e5:9c:
                    a4:3d:18:ac:96:9e:36:46:86:4f:66:d4:5a:64:0c:
                    b2:a2:a3:7c:fa:c8:3e:1e:6f:be:15:70:24:f1:1d:
                    3c:6a:19:69:58:5b:58:92:31:1a:b1:65:12:0f:be:
                    77:02:c8:b4:82:94:5b:64:95:b4:e2:20:db:a1:eb:
                    67:d2:fb:7a:26:75:16:b1:eb:a8:07:9b:4f:f4:e3:
                    fd:11:8f:ed:d6:d9:cf:d8:02:19:be:9f:2a:8d:f2:
                    b4:f4:bd:bd:e2:e0:69:7b:e8:fe:28:f8:8b:0c:ef:
                    d8:23:6e:55:35:04:8a:b9:17:45:ad:4b:4a:22:33:
                    81:50:f1:80:89:95:86:8f:b9:49:09:fd:31:74:be:
                    8d:d6:ca:eb:1f:0e:eb:05:59:07:71:f5:b4:f1:7f:
                    df:de:61:ec:50:fa:a3:b3:c7:fc:d8:be:87:a9:8c:
                    b8:5a:ba:79:4b:96:a4:fe:2b:64:b1:eb:27:14:e2:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:9A:34:3B:7D:8A:B3:7A:49:51:4A:C6:44:64:E6:5B:07:8A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:17:ff:a0:2e:19:0b:13:a6:15:c6:4b:bd:ec:c4:47:8d:
         97:36:4d:86:3d:b6:6c:e5:92:eb:fc:6e:07:a5:7b:12:17:f9:
         92:b3:ba:b4:ad:e9:2e:2d:bf:5c:c3:0d:fa:ce:7a:7a:d0:51:
         cd:8a:0f:ad:54:b7:aa:39:24:83:c0:21:83:81:96:cc:c3:16:
         91:ab:fe:2f:eb:bf:9f:07:13:ce:90:bd:9b:9b:7a:71:ab:62:
         63:bd:b5:1a:05:c5:76:2e:fa:59:2d:c6:94:1f:da:fa:4b:e7:
         36:cb:2a:89:3c:03:df:9b:7e:86:68:f7:1a:5e:56:2a:97:74:
         8a:49:e8:49:47:6b:67:7f:7a:e4:39:b6:b6:dc:4f:0f:54:ea:
         cf:fc:ea:c2:4e:3e:b6:04:bc:d5:52:1f:90:d5:42:4d:65:c1:
         ce:48:a2:a4:f6:33:57:fc:85:7f:b1:26:1e:ad:83:8c:c4:65:
         98:2e:12:a2:6a:ce:4d:f2:4c:f6:57:12:cc:0d:6b:1d:9f:bd:
         ee:ed:4b:02:1e:d8:32:18:9b:98:6a:59:90:fb:60:89:45:91:
         97:eb:bb:60:fb:13:79:41:03:7f:fa:eb:9d:ec:b6:a3:50:36:
         4e:66:19:11:a9:84:20:7b:c7:9a:b4:98:72:72:54:7a:87:f0:
         6d:6c:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:45 2025 by rpki-client