Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa
File:                     2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa (raw, json)
Hash identifier:          HjrtrxyMj0GQmmCeuN7w5oRzr38HhcUCCib2/JAKHGc=
Subject key identifier:   D9:85:00:7A:DD:63:CA:28:F7:25:E9:A7:C2:F5:5A:05:8A:A5:F3:67
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285848143A7F0FE9DC799E20F51900
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     14618
IP address blocks:        144.81.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7f:0f:e9:dc:79:9e:20:f5:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b5ffe447-0d0f-4e80-a25f-644437e2815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:b0:8e:21:fd:2b:02:61:4e:f3:09:7b:f4:
                    46:a5:f9:c5:c3:55:8d:2d:ea:e5:dd:d7:54:5f:e7:
                    48:76:4f:8d:8b:c0:a6:92:93:ad:9a:53:74:54:01:
                    81:90:6e:a1:7e:77:80:4a:90:a2:df:6d:8f:b6:1c:
                    85:cd:ec:44:11:45:89:bb:73:f4:9f:68:7a:93:d0:
                    ba:05:02:3d:d6:e5:d2:b9:ba:cf:5d:62:05:c6:49:
                    b1:b4:e6:c9:d0:f6:82:e4:35:44:36:23:01:72:0e:
                    e5:87:e7:e8:1e:8a:62:2e:15:49:98:c9:bd:e8:21:
                    06:1d:78:4f:e3:7b:30:47:61:a8:88:38:fc:39:0c:
                    ed:72:d7:d4:e0:d1:b1:f6:ed:9a:8b:29:1c:0b:04:
                    22:75:89:8e:0f:f3:64:8e:f0:2c:38:44:44:4b:4e:
                    4f:aa:44:28:ea:46:a2:da:43:6a:59:1e:af:4e:9a:
                    45:26:69:cb:9e:8d:16:ce:97:c9:86:a7:52:03:0e:
                    61:90:67:48:ed:46:05:c4:ff:d6:6c:3a:20:17:ae:
                    fa:19:13:6e:04:1f:a9:bc:13:d5:32:fc:f0:67:8a:
                    41:85:10:2c:9f:cc:48:c9:74:b3:a5:41:9f:42:ea:
                    99:82:eb:0d:74:fc:47:3c:91:b5:88:06:e7:41:78:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:85:00:7A:DD:63:CA:28:F7:25:E9:A7:C2:F5:5A:05:8A:A5:F3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:5b:72:ba:bd:a6:62:6d:16:54:93:c8:77:31:39:36:23:
         f1:0d:52:af:05:19:f4:cb:1a:f4:7d:22:9e:20:7c:17:ea:1f:
         43:bb:1d:a0:1c:0b:62:c2:a5:93:a4:e7:ea:91:12:e7:29:45:
         09:97:7e:e8:f2:4d:d9:02:f9:45:92:ad:17:aa:d1:63:31:9a:
         12:85:8b:dd:d9:c5:69:ee:99:bf:7e:84:1a:af:a5:dd:9c:1b:
         5f:fe:d0:2f:57:00:20:45:4b:75:eb:6f:03:d7:fb:e4:d5:35:
         60:78:e8:9e:bc:21:7d:ac:48:1c:09:6b:3b:c8:5e:09:89:a4:
         bb:75:a0:30:a1:4f:86:24:3d:0b:d8:de:09:76:cc:a7:1f:bf:
         19:e5:3d:cb:b1:a9:ad:5b:09:ce:50:19:72:e6:c2:64:e4:0d:
         a1:5f:57:f4:9a:e3:2a:98:c2:f0:ee:68:9b:3e:78:42:fc:47:
         1b:f1:20:e3:a9:17:69:15:15:62:fd:67:5c:f9:66:c7:49:89:
         e8:9d:2f:c2:11:4d:b5:5b:2e:4d:b4:ad:75:34:ca:ec:82:f7:
         40:c8:ec:2e:96:bf:00:c9:99:16:6b:dc:42:2d:e4:97:c6:de:
         55:68:eb:e6:92:73:5c:ec:2d:d3:71:4b:48:2f:7b:fc:17:3e:
         2a:08:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:51 2025 by rpki-client