Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/62554e17-2602-33a4-b97a-c414352b8ac4.roa
File:                     62554e17-2602-33a4-b97a-c414352b8ac4.roa (raw, json)
Hash identifier:          11GaOh39Uz6nTQkz66hEiWb6SYzNvwDJrpyzFosfquU=
Subject key identifier:   DA:4B:44:5D:76:25:FC:6A:75:6E:D5:9A:83:9E:7F:D1:CC:53:A5:66
Certificate issuer:       /CN=fe27b7e0-b437-4c2e-acb7-0e81eb620166
Certificate serial:       010D0C9F43285848653036F3E4401BF622DFEB80
Authority key identifier: C6:11:55:CA:B0:EC:F1:3F:31:A1:F5:B6:8B:8A:34:8B:69:5D:21:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/62554e17-2602-33a4-b97a-c414352b8ac4.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     7380
IP address blocks:        192.82.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:36:f3:e4:40:1b:f6:22:df:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe27b7e0-b437-4c2e-acb7-0e81eb620166
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=4fe7cac5-a09b-47a5-902c-ecd2e167ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:c4:bf:a8:70:78:e6:b2:49:15:15:a1:db:
                    57:ac:36:a0:59:86:5a:53:f6:33:8f:d7:e1:69:98:
                    b3:dc:4f:6d:50:29:df:40:fb:52:5c:90:16:20:ee:
                    c2:bd:34:51:de:b8:ec:de:61:b5:cf:96:7f:ef:75:
                    63:d6:22:cc:b1:97:38:19:3e:f0:a8:46:de:4e:45:
                    29:95:ab:b7:4f:4f:0c:7c:fa:e7:ab:6e:c8:fb:75:
                    ef:a2:c5:10:f9:79:77:9a:ed:a0:ad:24:0a:41:02:
                    a9:08:23:91:31:98:1f:3f:bf:35:88:0f:2b:45:a3:
                    01:ce:e3:35:f5:14:41:d8:a3:60:eb:e2:a2:23:9e:
                    dc:ac:b5:75:79:14:5e:9f:b8:32:81:8f:3d:65:7a:
                    09:e4:a0:26:0a:19:7a:ca:ee:c3:b9:86:e9:97:3e:
                    23:44:53:0d:fa:41:0d:67:07:a9:d0:13:91:5e:2f:
                    e8:d0:8a:2a:0d:44:0f:82:62:d8:90:2a:11:d1:20:
                    15:40:9f:f3:ba:eb:5c:20:b5:09:5a:5a:8b:99:48:
                    88:f6:d0:28:d3:1f:ba:c5:da:e5:b6:73:ee:e5:cc:
                    ec:68:e6:5f:9d:0d:51:95:02:5f:92:b2:d8:9d:55:
                    d7:c9:6b:49:51:fb:1b:93:24:3c:77:a7:c7:b4:42:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:44:5D:76:25:FC:6A:75:6E:D5:9A:83:9E:7F:D1:CC:53:A5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/62554e17-2602-33a4-b97a-c414352b8ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/fe27b7e0-b437-4c2e-acb7-0e81eb620166.crl

            X509v3 Authority Key Identifier:
                keyid:C6:11:55:CA:B0:EC:F1:3F:31:A1:F5:B6:8B:8A:34:8B:69:5D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:41:14:f2:d2:f4:62:73:8b:96:c0:4e:02:e4:8a:54:70:f2:
         03:fb:d7:af:5a:63:4a:e5:03:90:52:07:e3:33:f5:d8:93:c7:
         98:54:df:4f:e2:97:7f:52:e8:28:fe:a7:c4:2d:9d:1b:b8:b2:
         bd:d7:17:20:f7:1f:e3:bc:96:8a:55:83:d5:57:f2:51:a0:66:
         54:da:78:a7:d3:8c:05:47:67:5d:0b:f7:80:7c:60:72:b0:bf:
         0a:23:68:fe:44:91:61:b9:45:76:02:4a:4a:63:d5:08:fa:87:
         cf:79:9b:4c:95:20:90:f4:10:26:fc:44:2d:8c:08:5c:06:42:
         b7:9c:2a:88:fd:64:b4:41:4a:ff:2c:4d:d3:5e:69:90:c5:fb:
         47:75:b7:7e:37:38:6d:fd:49:01:00:03:85:76:1b:ff:f2:7a:
         2e:0a:9f:14:58:6e:27:69:9e:43:e8:15:06:1f:8c:d1:f3:9c:
         f4:3d:75:a7:f6:be:fd:e2:a3:9d:af:d0:2f:ee:c4:a6:ee:14:
         f1:20:5c:53:aa:e7:09:a9:3f:84:26:52:98:4b:5f:71:bf:2b:
         d9:f8:a3:1c:c8:ee:db:b1:ae:32:8d:68:f4:c6:16:39:b8:10:
         0e:18:47:3d:1a:51:dd:01:49:82:89:e9:c3:72:12:65:6a:85:
         97:9d:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:59:25 2025 by rpki-client