Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
File:                     61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json)
Hash identifier:          ls3UxRv8zSbJw//Ako6ZOsyXcCBly96uWA44tLCIwEY=
Subject key identifier:   1B:1A:76:2A:42:03:15:61:C6:B2:81:87:6D:73:5D:70:F3:1D:BD:7E
Certificate issuer:       /CN=e91007f4-8b69-443f-87b7-248480814a0d
Certificate serial:       010D0C9F4328584832F02C63011FD904FDD7A980
Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     11039
IP address blocks:        128.164.0.0/16 maxlen: 16
                          161.253.0.0/16 maxlen: 16
                          161.253.0.0/17 maxlen: 17
                          161.253.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2c:63:01:1f:d9:04:fd:d7:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=680e2edc-95c7-42bf-9b13-b3fdd6093776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:0f:c7:80:12:33:b1:48:51:e0:5b:a0:52:
                    c4:bd:21:2f:c5:84:fb:cd:f1:26:9a:02:e1:ab:88:
                    3a:dd:57:16:ba:6c:eb:d8:cc:27:30:c8:ae:76:49:
                    7c:e1:50:61:81:91:98:c7:eb:af:08:16:c9:1b:89:
                    59:c3:61:5e:f0:f3:14:1b:d1:64:ca:d9:f6:47:74:
                    82:c4:13:4f:2e:0f:57:2b:ff:3d:fb:40:db:15:a4:
                    d1:c0:fb:d0:9f:df:c7:ca:d6:2b:78:31:62:59:9e:
                    3f:26:20:c1:0c:74:be:56:82:04:6c:c7:1a:7a:80:
                    f7:6a:84:aa:8b:66:56:96:b8:66:48:45:9e:1b:00:
                    ed:aa:18:52:d8:44:6a:65:f5:c1:ca:7e:75:22:60:
                    5e:37:08:5c:36:76:9f:fa:24:e2:12:d9:d7:00:75:
                    94:90:90:f3:02:7a:ec:bc:e4:62:41:55:3b:a6:6c:
                    59:ae:5e:a7:c8:c5:f7:10:ca:87:40:6a:cd:f9:a6:
                    39:18:bd:1a:49:41:71:cc:6c:05:8a:43:15:ce:a4:
                    9a:b8:86:b4:88:f6:0c:67:0f:b8:7b:31:6f:99:a9:
                    ca:2b:14:70:02:c4:6e:45:de:ae:2c:33:6d:29:f6:
                    10:13:a0:e7:85:4b:0b:5f:04:d0:b6:86:a2:e7:ca:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:76:2A:42:03:15:61:C6:B2:81:87:6D:73:5D:70:F3:1D:BD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl

            X509v3 Authority Key Identifier:
                keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.164.0.0/16
                  161.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:b9:89:34:bd:f0:09:17:eb:d0:44:9f:10:2d:49:6d:d4:
         f6:68:1c:42:9d:76:cd:37:1c:a2:45:3f:70:e3:9d:a5:2c:d3:
         62:46:48:a5:25:08:64:10:39:34:89:85:50:28:70:77:f7:ea:
         4c:b1:fa:0d:3f:05:77:66:90:e9:5d:a8:0e:51:44:97:b5:07:
         b8:f4:c4:7d:af:be:7d:bc:84:69:a5:d1:46:d6:e1:f6:8f:68:
         74:b1:c5:5d:9e:d3:1f:c3:87:92:ca:21:aa:9f:25:b8:39:14:
         8f:36:ae:1e:98:0c:49:85:f2:67:28:17:87:df:db:ab:c5:0a:
         f7:a5:d5:e0:3d:c5:de:a3:dc:b5:46:30:ba:8a:ae:fc:f5:f8:
         f7:61:ee:a9:54:72:b2:e8:28:8a:bd:c4:73:d3:9b:0a:c1:4c:
         3b:a9:04:d0:f8:13:23:1f:88:26:00:dd:ce:7e:a7:ae:c8:5c:
         6a:2f:f7:31:b9:10:d6:16:36:94:de:f5:a8:05:be:28:76:b3:
         51:0d:37:ca:09:a9:d4:7e:e7:d2:42:1a:ee:f0:6e:fa:8c:eb:
         d5:2d:de:a4:d1:cd:30:60:80:e4:24:78:48:df:1b:57:a1:e7:
         5a:a6:30:16:72:3d:66:5d:c0:84:2e:ef:81:1e:87:45:c2:a3:
         d0:9d:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:47 2025 by rpki-client