Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa
File:                     3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa (raw, json)
Hash identifier:          H0nLRUSK5pxmP/JzOav3DUcD6+xHlyjSInHBzD79Q+Q=
Subject key identifier:   F3:72:E3:65:99:4B:15:4F:38:9E:35:E1:72:B5:57:5B:7B:DA:B4:C7
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F43285847FF4A4B9B05F56D97F7D1C1C0
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     14977
IP address blocks:        146.166.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4b:9b:05:f5:6d:97:f7:d1:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=b1170082-60e4-4869-a5b2-8215c38ced18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:7e:6d:54:5a:6b:64:41:78:70:37:9d:8b:
                    b2:48:be:a8:29:3d:f8:b1:96:46:8d:62:44:84:78:
                    cd:cf:39:f9:af:6a:55:11:ce:a6:45:47:e0:2a:b8:
                    d7:cf:1b:47:1a:f4:1b:5a:ce:30:7a:9b:6c:64:df:
                    8f:89:2c:2d:a5:09:19:05:ff:68:5e:84:68:e2:1f:
                    85:8d:a7:af:81:3b:ab:96:a0:c9:99:7a:91:96:52:
                    42:b1:8e:2b:5a:64:de:06:f1:8c:ad:d0:b6:da:81:
                    60:43:ff:57:cf:fa:67:5c:62:a2:9a:cb:0e:7c:a8:
                    04:ee:10:c2:1c:d9:63:fd:c7:b3:53:53:0d:10:db:
                    98:00:d2:5f:98:c9:5e:5d:8f:15:de:b0:58:d5:74:
                    2f:9a:12:a5:b1:03:c7:8a:b2:04:f6:e0:3f:43:58:
                    4c:93:fd:12:8b:3b:7d:30:13:d9:b1:33:ee:f2:89:
                    b2:43:ee:3a:21:68:79:c3:d9:94:94:9b:87:96:4a:
                    fc:c6:29:4d:23:50:b4:27:ee:bd:b8:ad:71:0e:2a:
                    d9:fd:2c:11:7a:5c:06:5c:f7:77:37:a9:21:97:5f:
                    09:bf:1d:1e:7d:1a:a3:83:7e:5b:33:c1:8c:0c:ae:
                    c1:4e:88:ba:dd:ee:c2:33:9c:91:fb:58:b8:8a:42:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:E3:65:99:4B:15:4F:38:9E:35:E1:72:B5:57:5B:7B:DA:B4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:64:06:94:17:39:fb:f8:bd:16:5d:38:58:00:6a:e2:a5:
         93:c8:d3:07:8c:5f:a8:93:73:2f:37:c0:d1:0c:61:fb:17:3c:
         4d:80:69:25:ec:e0:34:cb:50:c5:c7:0f:20:8a:26:38:50:85:
         ad:05:45:64:59:00:80:50:3a:2c:6f:85:27:b6:66:93:e6:fa:
         a5:a6:af:17:f0:fc:8d:8e:cb:76:f9:35:a4:3a:fd:02:52:fd:
         6b:ee:db:76:37:5d:83:3d:48:d9:3d:11:b6:8e:d8:22:d4:9a:
         26:81:bf:64:f6:3f:02:e6:54:f2:c4:0c:aa:35:ad:7c:9b:49:
         b4:b6:8e:14:b2:be:b7:9b:33:bb:03:92:9c:83:35:ce:9a:14:
         c3:43:6d:10:d1:06:6e:7c:00:b1:73:24:96:1b:96:f3:44:c4:
         e9:f8:98:95:22:78:1d:46:9c:7a:74:6d:a3:cb:0e:e4:11:21:
         40:a8:9a:ae:e5:b3:aa:f9:69:ce:a4:30:02:ad:7e:5c:c3:28:
         07:0d:17:71:25:af:b5:47:12:b8:2b:06:55:c0:28:fe:db:c6:
         67:45:ca:fa:02:88:31:77:9d:15:c0:ca:ce:80:f3:a3:fc:96:
         1a:98:ca:12:ac:db:4d:ec:04:3f:86:3d:5e:b3:05:bc:d9:c4:
         ad:41:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:23 2025 by rpki-client