Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
File:                     a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa (raw, json)
Hash identifier:          sSiSLT7WmMy6UW6+eCRKIKFYN7uNmr4L/kq7u/kqr7o=
Subject key identifier:   A9:83:7E:3E:1C:48:99:E0:44:20:CB:DD:B1:4D:29:86:D0:11:11:53
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424ADA788928E7313AB66E00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:da:78:89:28:e7:31:3a:b6:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=fcbfc68e-8063-4a6c-92c7-22306031e2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:b4:f0:8e:d7:14:5b:32:75:94:09:45:8a:
                    8f:c0:6b:62:4f:1f:38:37:b3:23:d7:2e:f3:13:84:
                    9b:b4:c5:ee:31:6d:ae:74:81:7c:38:e6:9f:56:c1:
                    b6:c7:5a:d5:72:db:08:64:6a:84:84:2b:c9:c1:d7:
                    98:d1:a8:34:c0:26:ef:ab:01:20:91:8a:14:a3:78:
                    be:11:57:c2:a8:09:34:ba:67:d1:de:e6:73:34:79:
                    92:ea:e3:8d:35:ec:ea:e3:48:d6:98:2a:b7:1c:9e:
                    a1:a0:04:c6:26:b8:15:7b:9b:03:fc:44:48:3a:62:
                    08:6a:ec:0b:74:99:1f:46:6c:f6:04:a8:52:9c:2c:
                    a1:b7:9d:40:5f:21:89:df:91:46:37:fd:17:b2:13:
                    df:f4:59:99:b8:a5:a7:b5:34:68:e2:ae:1d:41:8f:
                    10:2e:a5:ca:e7:b6:b4:5b:e1:d9:8b:28:12:54:ed:
                    a4:58:80:b2:c6:4e:58:d0:b9:f9:44:42:86:03:31:
                    9e:c6:3e:79:4b:f5:31:4d:83:63:2f:2f:e2:0c:5f:
                    a0:49:bc:13:ed:22:16:aa:5c:17:94:f8:b5:a7:27:
                    f4:44:0e:bb:9d:58:44:c3:3a:f0:12:a0:bd:67:5f:
                    b4:a9:b2:ca:33:2a:7d:f1:1e:be:52:40:29:53:55:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:7E:3E:1C:48:99:E0:44:20:CB:DD:B1:4D:29:86:D0:11:11:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:28:59:0a:db:49:4b:8d:f5:0a:fd:84:50:d0:44:c2:da:0a:
         98:88:fd:53:b3:84:2e:25:c6:1c:ed:b0:e3:d8:a5:c7:23:d9:
         a2:1d:20:24:8b:ba:4c:a9:65:47:ab:62:b5:a5:87:37:25:2e:
         fd:ca:c3:c8:cc:3b:fd:3d:76:d9:80:ee:18:cc:81:4f:98:b7:
         80:d3:d7:ab:83:b1:65:7c:89:c3:93:fd:76:f1:55:26:b6:66:
         1d:73:39:d5:e4:c6:57:83:60:1e:1f:81:8a:59:ca:b2:89:97:
         62:e6:6f:3f:58:2e:49:17:05:b0:2f:b6:88:47:6c:5a:2d:ef:
         bf:d8:1e:97:e9:78:23:80:70:cc:a9:fe:ca:74:f1:8c:43:cd:
         33:96:2a:72:81:54:b9:08:a5:fd:3f:c6:3c:5a:e5:db:b0:93:
         e0:9a:80:b4:0f:a6:23:68:83:34:38:76:36:21:73:7f:fa:55:
         de:bd:5b:35:61:e2:4b:6e:84:6c:45:55:a7:5d:f4:48:d7:d7:
         3b:d1:9f:2b:68:19:39:ff:87:b6:d7:ff:ec:de:ca:28:a2:72:
         f5:6f:a0:59:d7:af:41:d7:3a:e0:e5:e6:71:8f:3e:3b:39:5d:
         03:0d:45:63:25:e8:62:3e:91:94:7a:43:a3:eb:67:53:b0:d3:
         1a:9e:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:34:39 2025 by rpki-client