Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa
File:                     70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa (raw, json)
Hash identifier:          pPqzD074aocs4oQ2qeFe0YK26jbMN5gR6R9rISC6wvo=
Subject key identifier:   1C:4D:5A:86:5A:0F:4B:B1:7A:68:65:96:F2:0F:56:5F:40:62:94:3D
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F432858486EF5BBBE3ED798DEB0A3FE80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     18434
IP address blocks:        156.55.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:bb:be:3e:d7:98:de:b0:a3:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=17d0c947-b50d-470c-931e-e5061b101d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:e6:db:15:2f:22:f2:f7:7c:50:aa:4a:d0:
                    68:75:f9:2c:0e:16:1f:01:58:b2:95:f5:e4:97:23:
                    97:d5:de:c4:72:4e:5f:09:e2:9e:f6:95:6f:cd:a2:
                    3f:40:f2:e0:3a:2d:54:ae:72:19:8a:3f:a1:80:de:
                    39:d1:44:12:e2:8b:3b:61:17:2e:82:d5:b5:06:45:
                    42:f8:c9:78:55:db:99:4b:08:c9:40:8a:ad:02:c9:
                    69:da:06:9b:a9:65:5e:af:4e:05:42:92:1b:02:e3:
                    af:2f:c2:82:ae:4f:4c:90:c2:2c:16:4f:f5:70:c4:
                    83:4e:10:aa:aa:ea:02:f3:c1:b3:bc:41:45:c2:86:
                    8d:f1:44:90:28:d6:2c:51:79:a5:bf:ef:39:f0:f3:
                    b9:cc:71:5d:ff:00:56:e9:9c:f7:a6:dd:d4:04:72:
                    12:c7:60:41:84:09:0f:ca:c8:f6:b8:62:cd:78:f9:
                    4d:c3:a0:3d:69:bb:fb:25:1f:7b:cf:ea:53:05:33:
                    fa:11:96:88:8e:f0:e2:e1:3a:bc:bf:5a:f6:be:ab:
                    f5:b6:b7:48:b3:fa:68:94:c9:16:05:88:7f:00:50:
                    29:c9:44:f3:3d:84:4d:3e:ae:92:91:17:96:9e:84:
                    d6:63:af:2f:e0:95:b4:c0:14:01:b6:1f:27:8d:2c:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:5A:86:5A:0F:4B:B1:7A:68:65:96:F2:0F:56:5F:40:62:94:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:de:00:1d:f8:a0:a6:93:8f:30:7c:66:88:e1:22:e2:51:
         49:f6:73:08:7d:96:7c:c7:50:59:db:30:6b:d4:4e:e6:57:fa:
         bb:58:f9:48:be:1d:3f:65:60:5d:20:28:d9:22:68:d6:01:2c:
         da:2f:50:6b:af:25:28:27:0f:4a:6c:46:23:52:da:06:cf:97:
         68:f5:37:02:69:49:df:90:be:b0:8a:ec:50:6a:8e:18:9b:5a:
         00:09:40:07:ab:ef:9f:51:a1:49:ed:98:f8:af:ed:17:fa:0a:
         5a:d7:e7:7a:4a:5d:7e:05:e3:fc:ce:d1:e2:59:f9:c6:93:b1:
         3a:4b:21:91:40:1a:11:8f:e3:c5:af:b7:43:3c:2c:63:f6:11:
         03:12:a8:a2:44:74:24:2f:d4:33:b4:53:eb:ce:15:fe:46:73:
         1b:b5:6a:a9:3a:77:24:86:4d:9e:42:94:88:d9:13:99:6f:bf:
         65:c9:cb:cd:27:6c:ef:ae:29:7c:df:6a:99:6f:21:bf:4b:fa:
         77:ba:73:b8:69:46:6e:5b:ef:31:7d:65:ba:ba:32:0b:6d:95:
         e3:9d:5e:f2:24:fd:3d:e8:a3:f4:59:49:73:bc:43:0b:f8:a2:
         fb:70:d2:a0:f7:af:ae:86:81:7c:e6:de:7f:ed:d7:ed:ac:18:
         c8:d1:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:03 2025 by rpki-client