Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa
File:                     8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json)
Hash identifier:          GL2BoVjYuVKkEKUd/IO6q76B6DgsthQcxoqSTUl/dOQ=
Subject key identifier:   C4:43:14:AE:C4:C7:46:F1:2F:D6:C4:6E:62:88:B2:5C:37:F0:17:01
Certificate issuer:       /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
Certificate serial:       010D0C9F43285848424AD19CE580A3D8DE154BB0
Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     16652
IP address blocks:        198.252.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d1:9c:e5:80:a3:d8:de:15:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=faf1e6cb-d2f4-4fa5-b3cd-f25f1e8e04ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:c2:d9:22:b5:7d:df:7d:64:a9:f1:b5:df:
                    96:f4:de:05:d7:1e:46:55:7c:7a:12:41:6a:7d:ed:
                    20:b0:fd:ce:13:df:dd:1d:3f:c6:f4:27:ae:60:15:
                    25:c1:83:81:3c:61:f5:35:c6:29:11:5b:6b:c4:6d:
                    0c:4c:2b:22:7e:9a:4c:68:ba:b3:55:3f:44:11:2c:
                    32:d5:95:0c:6b:27:53:02:8f:bb:ad:c0:8e:fb:d6:
                    96:67:b2:ab:e2:b8:30:3c:8b:cd:46:38:25:bc:90:
                    59:b5:9e:33:18:3c:eb:16:ed:be:8d:de:37:0a:0c:
                    df:e4:a8:fd:ef:6d:ac:2a:c3:a0:70:73:cc:21:55:
                    26:ea:99:fd:9a:35:96:e7:54:d2:45:46:b5:f9:d8:
                    87:f7:e8:6c:15:ad:e8:bd:06:73:8f:63:52:ca:72:
                    6a:52:07:3c:43:bd:5a:9d:b0:92:d5:9a:ff:2d:4a:
                    d0:19:50:ce:18:71:03:78:b8:ac:0a:87:42:4b:8d:
                    00:22:23:5f:2e:62:13:71:b8:f7:09:16:40:21:36:
                    c5:50:0f:c3:fe:07:b6:85:0e:a1:a0:19:cb:5e:93:
                    d8:5e:87:e7:69:43:b0:c5:15:be:ad:ca:98:2a:2b:
                    db:fc:03:39:ed:dc:e9:61:ec:d8:6c:0a:41:92:96:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:14:AE:C4:C7:46:F1:2F:D6:C4:6E:62:88:B2:5C:37:F0:17:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl

            X509v3 Authority Key Identifier:
                keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:b5:22:b1:25:56:c1:85:18:14:b4:7f:93:5f:6a:67:1a:
         3a:e8:1f:88:e7:bd:22:1b:d0:6d:0b:6e:df:aa:97:6c:b5:fa:
         79:16:b1:46:87:1f:96:aa:ce:23:2f:33:33:f2:20:52:20:ff:
         14:be:e4:6a:35:4b:4b:4a:63:53:cc:5e:c7:11:88:54:b7:35:
         9d:ac:eb:c6:a2:92:b5:4e:4b:30:17:46:55:e7:04:5d:dd:43:
         b0:71:5c:37:e9:e9:f8:dd:f1:29:20:55:41:fd:04:7e:0c:76:
         5a:a1:57:18:de:87:11:d2:5e:f7:a8:8d:fc:93:aa:aa:bf:45:
         e8:07:ab:ba:30:94:8c:a5:60:88:cc:43:11:ad:22:56:2a:e7:
         8e:e3:6c:6b:1f:b9:6f:85:c9:07:5c:af:ca:09:41:14:e2:65:
         3f:da:cd:67:9a:a0:77:a4:76:0c:ab:94:cd:45:ab:e7:38:bb:
         e1:de:c3:46:37:ad:cf:ff:d9:1a:be:88:da:b4:a7:bb:3f:84:
         20:a3:f8:25:b4:f8:68:8b:f7:77:42:a5:08:89:96:28:cb:7c:
         80:20:0c:ea:aa:0e:d1:f6:48:3a:db:54:98:5e:98:a9:00:ef:
         80:83:e7:3c:f0:94:eb:31:b8:40:1e:fb:eb:81:1d:11:82:3a:
         ee:fa:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:36 2025 by rpki-client