Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f520f43a-8ba2-3bfb-bf0a-c4d254bea046.roa
File:                     f520f43a-8ba2-3bfb-bf0a-c4d254bea046.roa (raw, json)
Hash identifier:          c7baw+Ubx/MNEq49cC6wvATYuG77NUzTkzFS8rWU6Zo=
Subject key identifier:   01:FB:84:B9:F1:7A:86:65:9D:AE:18:16:2B:74:EB:AF:3A:33:D3:37
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5001C445E227771FAC9100
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f520f43a-8ba2-3bfb-bf0a-c4d254bea046.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     54719
IP address blocks:        159.18.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:01:c4:45:e2:27:77:1f:ac:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=dbc648dc-2209-4600-b5c2-0148983cb06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:ed:7a:6f:d1:da:64:e5:e6:08:dd:a4:13:
                    18:6a:14:13:c2:a4:f4:09:64:6f:28:6c:b5:ac:eb:
                    3f:c2:d0:66:78:a3:b0:59:be:34:9e:66:9a:82:aa:
                    13:a5:37:c2:a6:be:c0:31:94:72:f7:75:4d:1b:42:
                    43:95:67:3a:90:4d:2a:44:28:87:48:52:b1:62:cb:
                    49:f3:37:a8:8b:89:96:22:2d:07:85:65:ef:b9:d1:
                    bd:b8:67:0b:2f:03:19:40:25:fb:ae:7a:e9:a3:60:
                    20:d2:70:e2:ec:e1:e5:d0:86:2f:85:b0:31:87:22:
                    5e:9a:5f:5b:2b:05:2b:27:c1:e8:2d:ef:c9:5c:f3:
                    26:87:4a:0e:28:80:70:e7:b8:95:ac:de:95:d3:64:
                    6d:47:53:f1:65:9c:8d:38:fc:17:3f:4b:26:94:c7:
                    d9:9d:76:4b:b5:8c:59:ee:b3:29:23:bc:67:bf:18:
                    1e:bb:13:00:19:04:4f:07:c0:e0:48:12:1c:45:65:
                    93:31:e1:94:e8:c6:91:2f:31:02:45:0e:85:0b:74:
                    31:db:bf:ed:22:6f:09:8e:b6:36:fd:94:10:41:ca:
                    e4:98:2c:d5:6d:de:42:0e:63:9f:d4:73:c6:1a:47:
                    cc:90:c8:fa:1f:26:48:80:31:67:43:2e:50:b7:30:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:84:B9:F1:7A:86:65:9D:AE:18:16:2B:74:EB:AF:3A:33:D3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f520f43a-8ba2-3bfb-bf0a-c4d254bea046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:18:81:1b:24:f4:6b:5a:92:cb:ba:c0:97:6b:52:8b:68:e1:
         de:07:ae:3b:b3:c3:76:23:b3:11:75:c9:f6:b6:90:ec:20:a4:
         82:90:7a:fb:48:f0:2b:85:03:d3:92:80:d3:ac:fc:fb:e2:8d:
         e6:f5:b4:e2:97:83:ac:06:75:6a:4c:20:01:a4:ad:b7:06:a4:
         3c:43:d4:9b:c8:9b:20:56:07:fd:52:c3:ee:69:f1:71:cb:cb:
         87:47:56:60:6a:d0:af:94:64:a7:71:5d:75:92:c6:ed:10:32:
         e4:41:93:09:b0:bc:38:f1:87:6b:fc:d7:d7:d6:67:d4:2f:0c:
         d3:b6:db:fa:f0:20:28:91:77:46:38:e1:94:75:18:d4:3c:9b:
         30:32:64:67:27:df:80:11:8c:c0:6c:f0:56:6b:8a:2f:20:4a:
         96:04:b0:50:bc:11:53:0f:76:f5:99:74:af:12:cd:00:0c:d0:
         bc:39:cf:52:71:d2:80:a6:23:2a:d4:b5:73:d7:9f:8e:b9:d6:
         34:06:c1:ca:fc:5b:44:cc:8b:46:c6:6a:54:7d:9f:b4:e8:85:
         e3:f8:0c:9e:5c:74:79:70:13:58:28:60:0e:5f:06:6e:8b:45:
         a9:a9:15:b9:5d:f1:bf:82:e2:96:c8:e4:7f:4b:69:29:f6:a2:
         15:a7:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:14 2025 by rpki-client