Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f9181619-5df5-3ad4-a898-399d79022e5d.roa
File:                     f9181619-5df5-3ad4-a898-399d79022e5d.roa (raw, json)
Hash identifier:          grfARJZri3iz4QpsLpD3pkhsjB1yReUIMfaiXk3FHUc=
Subject key identifier:   27:4E:9F:C5:9E:C2:CA:77:B5:74:44:C5:12:68:98:9D:59:21:7B:1B
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F432858487E50695D9344763B315C6A80
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f9181619-5df5-3ad4-a898-399d79022e5d.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     399244
IP address blocks:        23.139.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:69:5d:93:44:76:3b:31:5c:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=7b542b1b-bf09-4ab6-b5f3-a7b1588f62b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:b4:fa:5a:eb:43:35:b0:26:13:56:43:06:
                    80:93:9d:ab:57:c6:3c:bb:27:e1:43:d7:fb:f9:70:
                    6f:9e:12:42:63:47:65:aa:fb:86:b2:8d:8b:02:b0:
                    0e:8b:3a:61:3f:86:40:a8:ab:9c:e0:b7:37:e4:65:
                    4c:e7:75:3a:33:ff:1a:93:5e:3b:f4:97:51:79:0d:
                    f2:80:61:80:4e:15:ca:02:61:b0:68:df:f4:cc:0c:
                    cb:b6:23:5f:76:b6:21:4a:ce:0f:c9:7d:92:af:8c:
                    a6:2e:ff:fe:5e:0a:f4:ab:7a:aa:63:1e:ce:94:6b:
                    70:25:a6:f0:08:63:94:39:bc:77:01:6f:56:c3:a5:
                    30:31:8a:84:84:ae:bb:23:6f:43:a4:e1:eb:0f:52:
                    62:42:f6:5d:30:55:ff:37:e2:ff:db:77:61:0b:98:
                    c5:61:fe:d2:2d:49:07:75:c2:b2:05:e6:e9:31:50:
                    71:08:15:cb:c5:d2:bf:8a:0f:63:73:37:37:fa:4a:
                    17:75:a5:f3:70:74:cb:36:3f:21:e0:d1:cd:5a:8a:
                    21:6e:f3:bc:84:90:4d:39:ce:cb:18:cb:15:36:31:
                    a9:4e:bc:e7:d2:32:4c:38:2b:0a:00:c3:59:35:54:
                    07:47:17:5e:70:4e:b7:c1:77:66:59:38:20:07:ec:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:9F:C5:9E:C2:CA:77:B5:74:44:C5:12:68:98:9D:59:21:7B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f9181619-5df5-3ad4-a898-399d79022e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:50:5b:f2:7b:c1:d5:9d:25:3f:fd:21:66:e1:c7:c6:8b:
         41:8f:e2:03:2a:0a:3b:fe:cf:c3:af:80:a8:b4:e3:66:2a:2c:
         64:16:79:ce:61:7c:87:2a:31:46:02:13:0c:4c:ad:f3:da:a8:
         ef:6f:b9:95:6a:2a:b1:1f:5d:9d:5b:49:fe:e4:e0:20:92:c9:
         a5:10:2c:ca:2e:59:a0:d8:3b:98:72:05:c2:93:19:bb:87:cf:
         18:20:a1:07:f8:72:05:4f:4b:ad:15:5d:8f:aa:77:66:7b:b1:
         c7:41:9d:f5:07:65:dc:9b:40:b1:75:5a:e2:72:8f:00:ef:21:
         fc:8f:43:21:af:5a:3f:8f:22:58:30:e3:da:d6:c0:77:46:16:
         87:f2:e1:80:31:48:b8:00:5e:66:c1:bb:18:6b:91:7a:92:95:
         94:90:c2:c5:e4:2d:07:0f:57:4a:3c:6c:0b:39:4e:c4:83:c7:
         98:06:6d:17:fb:77:b3:0c:95:e5:db:13:38:8e:30:87:5f:60:
         70:5a:80:6f:47:c1:9e:bc:2f:16:c5:3d:55:19:b0:55:fd:07:
         2d:c2:0c:9a:33:76:59:5d:e8:9e:06:7d:85:f0:41:26:35:f8:
         14:c1:ae:3e:20:30:4b:ad:9d:f4:d5:87:1c:6f:e1:e7:4c:69:
         f8:01:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:22 2025 by rpki-client