Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/667bc097-adc7-32c6-ab33-9845a104ce40.roa
File:                     667bc097-adc7-32c6-ab33-9845a104ce40.roa (raw, json)
Hash identifier:          Fs+BcQdnhgnqJ3S7zJV1T0Ezw8xN9LK/RGyELSQPUPo=
Subject key identifier:   29:27:15:5F:2F:01:A5:07:D9:3E:EB:C7:1A:08:13:98:2B:75:16:09
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485F9ADEE724FB318E979C3280
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/667bc097-adc7-32c6-ab33-9845a104ce40.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        162.254.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:de:e7:24:fb:31:8e:97:9c:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=109dff09-4625-49c2-bacb-0c1d0780f921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:b7:f2:bc:6a:a1:bb:17:57:ec:ec:96:aa:
                    2a:f8:39:3e:98:8e:db:0a:f6:81:55:78:1e:65:7c:
                    b3:9e:9b:16:3d:12:2d:7e:3f:dc:83:0d:18:cc:21:
                    ce:97:60:18:c2:b4:39:3a:dd:1a:b4:ac:4a:9c:9d:
                    96:b1:d0:ed:fb:fb:4d:25:1f:67:d4:83:89:0e:d8:
                    66:f3:1d:e1:74:88:47:23:a2:44:a8:48:a5:9d:be:
                    7e:6e:dc:62:d5:f4:34:ee:c8:ba:f7:ec:96:5a:65:
                    74:26:05:cc:1e:e7:31:81:43:f1:8b:8a:3d:5b:b1:
                    a3:b1:01:0c:03:c7:e3:52:8a:60:0c:be:bc:eb:76:
                    5b:63:bf:45:db:76:0b:7c:47:d6:66:33:8f:18:6c:
                    b4:c6:95:95:5e:05:25:fa:de:d0:d0:5e:c9:91:41:
                    65:82:29:63:32:de:c0:fe:ac:17:f3:e8:52:de:f7:
                    f9:d5:77:b8:47:2a:35:41:06:95:8c:6c:18:50:09:
                    9d:5b:6c:cb:48:4c:75:9a:6b:a7:95:11:b1:0e:85:
                    f0:fe:85:a6:e5:69:f7:77:d5:bd:45:16:cb:f5:b1:
                    63:61:da:fb:bd:47:9d:8c:ff:a6:c1:9b:34:9d:ec:
                    f6:10:26:c0:65:a9:21:2f:89:25:e7:64:d2:67:00:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:15:5F:2F:01:A5:07:D9:3E:EB:C7:1A:08:13:98:2B:75:16:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/667bc097-adc7-32c6-ab33-9845a104ce40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:1b:43:aa:72:4d:a1:b2:c1:2d:1f:0a:79:27:28:4f:a5:
         e7:51:88:c9:cd:9d:65:9d:06:b9:55:87:63:00:b0:a8:5e:03:
         e1:ba:77:ab:13:59:2e:5b:c4:00:38:d8:fe:48:0c:40:06:7f:
         d9:73:57:3f:86:d6:5a:c3:c4:dd:bb:50:d3:4b:a1:78:60:db:
         1e:56:3c:50:0b:5f:46:e6:73:b3:ae:31:ed:a4:c6:da:25:bc:
         11:c9:d2:35:b4:7c:fb:41:fa:e6:ee:08:17:a7:77:e2:4a:b8:
         c9:2f:ab:92:54:9f:b2:93:a0:a6:8c:57:a5:a3:af:c6:b7:00:
         bb:fb:2b:d6:e0:38:46:28:b2:dc:f3:00:2c:22:ef:97:2c:56:
         74:2a:da:af:9c:c6:4f:86:54:b0:44:3b:52:4b:25:a7:88:93:
         f8:bc:91:ba:5d:40:fe:94:e4:7a:a0:f1:ee:70:1c:af:9e:2a:
         c3:6c:9f:85:8f:0e:ac:a9:c1:af:38:ef:70:ba:21:9e:9e:d1:
         78:f3:cc:74:d9:2b:82:32:6d:27:74:ae:be:ad:c0:29:b0:be:
         0c:22:07:14:b7:2b:71:43:89:62:fe:b2:b8:36:86:54:d3:53:
         3d:f1:19:ca:c2:0e:ab:3b:ad:51:84:42:8e:c4:b0:69:7e:1c:
         b6:61:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:35 2025 by rpki-client