Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/42218283-5f16-351d-82c0-ffcb563fff7f.roa
File:                     42218283-5f16-351d-82c0-ffcb563fff7f.roa (raw, json)
Hash identifier:          HORp0EfAwLIfhyKUAw2rEGkU/3rYtywCMNgnmtDqsQ0=
Subject key identifier:   F1:15:C1:4B:B2:B9:DE:CD:6E:A5:55:A2:A9:EF:33:E9:12:AA:B3:95
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285848090FBD133DFA601FA18BC340
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/42218283-5f16-351d-82c0-ffcb563fff7f.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     134365
IP address blocks:        107.151.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bd:13:3d:fa:60:1f:a1:8b:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=9ea2c86c-9ce7-4f7a-85a9-80ecc7c9864f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:e7:0a:a4:71:6d:7c:69:d9:d7:9d:09:83:
                    02:4b:ac:b2:21:84:3b:f2:23:95:6b:94:7c:af:3b:
                    ff:17:95:3d:17:32:31:e8:06:ff:9d:47:5d:55:1a:
                    86:94:eb:54:7c:7d:50:bd:b5:88:39:59:b5:94:7c:
                    7d:b8:18:a0:0e:11:d1:98:d1:a0:e0:78:50:b9:eb:
                    f0:78:fa:bb:23:6c:65:6a:f4:2f:ff:f0:ac:19:cc:
                    6d:0d:c9:ba:e7:11:91:94:cf:36:9f:75:32:0a:92:
                    fe:6f:8f:af:8d:ae:36:e4:57:a0:9a:5c:46:80:4a:
                    b3:39:86:d9:0c:af:bf:45:07:72:54:48:d3:40:1f:
                    69:22:4f:c9:7e:ef:fb:c6:c3:ee:5d:cb:d4:87:50:
                    9f:b6:26:9f:4e:3f:c9:19:2a:eb:ee:77:98:31:83:
                    e0:00:8f:6c:67:c4:af:02:d8:67:89:74:99:64:55:
                    6a:e1:c1:8c:41:72:0d:59:37:97:45:47:09:06:e3:
                    d1:7a:f4:41:f2:32:07:0e:f2:37:16:68:ab:8c:25:
                    8f:19:46:4f:d6:55:b8:e9:8a:0d:82:a6:2e:4b:9a:
                    68:8d:8c:fe:62:ce:7f:c4:55:d1:56:7e:44:f6:da:
                    78:bc:0c:be:42:ff:3e:32:a5:b6:04:7c:61:57:e7:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:C1:4B:B2:B9:DE:CD:6E:A5:55:A2:A9:EF:33:E9:12:AA:B3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/42218283-5f16-351d-82c0-ffcb563fff7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:12:fa:e2:56:54:40:8b:6b:3c:e6:68:1f:52:0d:f0:f5:f1:
         e1:7a:31:44:dc:1b:63:e1:11:7d:d3:2a:d5:5a:b5:94:4d:b1:
         94:09:14:c8:b9:a8:19:71:0f:21:c0:9f:74:a6:75:51:2b:65:
         cb:31:d8:b2:48:25:fe:e6:b8:ca:bc:c2:ce:80:8d:da:14:db:
         e9:f0:25:f4:dd:dd:e2:02:74:1e:33:1e:32:3a:03:52:85:d2:
         f2:98:0d:4d:6e:84:07:a8:35:c1:4e:72:a2:52:03:94:b7:97:
         c4:48:bc:80:55:27:92:6c:b7:da:d1:81:34:e6:ce:19:3b:e6:
         4a:82:fb:97:4b:5f:f1:b7:12:2b:50:ee:53:1a:1a:ff:78:b1:
         b5:9f:4b:fa:7a:59:3c:40:d5:a5:34:d1:0f:f9:3b:79:70:42:
         a1:a4:7a:95:4d:91:4b:29:a0:cb:f6:1a:9f:76:d9:e8:87:5d:
         49:5d:19:3e:97:01:be:7d:94:4a:8a:63:7c:48:45:c3:55:ee:
         a0:37:98:9b:eb:59:c3:57:5c:e5:6c:63:d2:8c:64:04:bd:94:
         40:5a:c1:d5:49:f5:8c:22:f9:13:82:1b:32:9c:46:7a:16:8d:
         d0:fe:d8:45:cd:95:72:e0:d0:7f:f8:11:31:57:5d:da:35:30:
         77:ae:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:45 2025 by rpki-client