Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
File:                     90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa (raw, json)
Hash identifier:          LDKG6cmqgoyndvA7hVmfwxaBJCNidqFtXmKkM5ikjTM=
Subject key identifier:   01:4B:82:23:95:C0:3F:59:9A:DF:B3:B2:06:25:CC:1D:A6:48:0E:50
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584871C07258F3021D7D836484E0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     393365
IP address blocks:        162.244.102.0/24 maxlen: 24
                          162.244.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:72:58:f3:02:1d:7d:83:64:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=c682a38e-6830-4e79-b6cd-cd98e7d26905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:ce:f1:c5:bd:b0:ff:67:78:ce:dd:2d:bc:
                    8e:03:01:1c:c7:6d:09:40:cf:f4:56:fd:9d:65:51:
                    37:90:4a:01:0e:a0:09:2e:67:a7:da:d9:57:3a:1e:
                    15:ae:53:8c:49:b4:bd:d4:bf:e5:05:61:b4:dc:32:
                    94:7b:39:03:cd:4c:6d:26:67:5b:47:d0:ee:c1:6b:
                    32:25:fd:f2:ad:99:e9:cf:d6:d8:54:45:a4:0a:b8:
                    0d:9e:6c:5f:28:0a:cc:4e:eb:3d:11:95:8c:1d:6f:
                    1b:30:0d:ff:41:97:17:e8:5f:89:20:17:e7:78:75:
                    cf:36:47:2b:bb:05:37:f5:cc:3f:4a:a4:7b:9f:c5:
                    17:7b:66:b0:21:bf:c4:14:23:31:97:e3:a1:e7:00:
                    18:90:8c:f3:4b:03:32:5e:aa:92:69:b2:f3:7a:99:
                    41:bd:8e:62:51:e0:e9:f4:3e:eb:78:10:ee:df:ba:
                    f3:32:67:14:fd:60:64:20:36:23:b5:57:55:22:40:
                    f9:41:d3:f5:f5:25:88:51:bf:72:29:2f:bc:16:08:
                    31:04:88:25:d4:f9:22:ea:05:07:d3:fd:c1:ae:8b:
                    1f:da:09:1b:97:27:16:b3:83:e7:74:5a:c9:7c:c7:
                    fb:00:5e:f3:73:48:db:cf:34:0a:d6:bd:a7:86:6d:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:82:23:95:C0:3F:59:9A:DF:B3:B2:06:25:CC:1D:A6:48:0E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9d:82:5e:ca:c1:c0:1d:7a:73:4c:f0:ca:56:04:0e:49:7c:
         e3:0b:2f:52:75:4c:61:b2:62:e0:ad:43:71:b4:99:b7:42:72:
         82:c0:80:fd:db:97:57:18:86:7e:98:17:d4:6b:99:d2:e5:76:
         61:c4:e7:e0:40:c6:d4:e3:f2:34:86:78:95:ff:e2:1d:72:4d:
         c4:f1:eb:aa:d9:27:fe:62:01:7c:23:ca:d7:23:8c:80:2c:46:
         49:57:5e:40:ab:12:15:14:72:66:40:a8:52:1f:d0:b8:d8:3f:
         2a:18:05:94:ff:c6:e1:85:57:a8:4b:b8:9a:b1:34:d5:d1:94:
         ef:23:a5:97:d7:f6:0b:8d:39:29:3e:a6:7f:15:66:24:3d:d6:
         b6:bb:c1:1f:f4:10:e1:83:1c:2d:44:77:51:d6:b8:57:68:a3:
         a9:39:81:95:e9:47:00:d7:3a:fd:01:6c:ba:d4:b3:03:06:5a:
         39:9b:d1:35:e5:4d:89:9e:18:3f:b5:13:63:f3:64:b1:48:f0:
         17:14:ea:80:2a:5a:c2:c4:49:b4:3d:fa:de:97:d5:dc:86:b1:
         08:fa:78:c9:e7:00:6f:e8:31:8b:f5:80:20:d8:bd:46:d8:75:
         30:55:9a:e1:ae:93:49:96:2c:40:3c:7b:f8:23:27:d1:99:00:
         64:9e:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:19 2025 by rpki-client