Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
File:                     e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (raw, json)
Hash identifier:          x1VbW6/0+0NMuvm0ssEs3WsjJN7CCHZ7QEvz4Z0At2E=
Subject key identifier:   AD:81:A8:5E:8F:45:52:CC:3D:7D:C3:3E:1E:EA:0A:B9:96:30:04:B0
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F43285848064506BC4F1B22BC1BCB8200
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     65104
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:06:bc:4f:1b:22:bc:1b:cb:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=a039ea9d-4b2e-4191-a4e5-88a2541edd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:cb:f5:9b:0d:2e:19:7f:77:b6:7b:8b:24:
                    29:62:9e:d6:94:fe:ee:af:6a:40:a4:e1:42:1e:92:
                    fd:3b:b4:24:31:0a:d6:10:f5:e8:5a:bb:17:98:b7:
                    b1:22:db:98:30:21:fe:ff:f2:43:04:1b:43:63:2c:
                    3a:c7:e8:b2:5a:ec:93:4b:0e:3f:eb:2c:1f:c6:f7:
                    4b:9d:cf:49:9e:20:fd:07:66:15:d2:46:35:fe:5d:
                    0d:9d:25:63:e9:2f:1f:a0:cc:a8:14:a9:81:5d:bc:
                    d7:44:79:85:60:3f:b6:ac:3d:11:4e:76:68:7d:16:
                    4a:bc:4d:03:92:4d:0d:76:51:89:62:9d:a1:84:9c:
                    85:48:9e:a6:62:80:05:3a:a4:08:18:97:ca:9a:a0:
                    8d:91:77:10:dc:64:97:19:38:f1:2b:33:2f:26:ea:
                    51:36:bc:b9:3a:91:b6:88:5f:60:a2:bf:ff:21:3a:
                    71:7a:7b:7b:b2:48:cb:a8:0f:ab:32:75:dc:dc:a6:
                    a2:5d:5b:60:d0:e2:50:26:9e:ce:29:56:e3:cb:7e:
                    ea:54:36:70:f3:dc:c7:47:7c:a4:57:8a:6e:f6:39:
                    ec:fa:4b:23:f9:6e:7d:1b:1e:c6:3f:cf:26:83:13:
                    95:15:76:fd:1d:7d:24:ca:51:c9:07:10:7c:97:7f:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:A8:5E:8F:45:52:CC:3D:7D:C3:3E:1E:EA:0A:B9:96:30:04:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:22:4b:36:2a:86:45:61:5d:2e:df:3b:d7:ac:e7:ea:12:c1:
         5c:e4:3e:77:da:c4:9d:85:67:df:17:0a:bc:cc:b2:ff:19:2d:
         02:5e:84:13:02:66:84:16:4b:55:e6:cb:dd:93:95:de:2f:5e:
         e6:61:25:f3:8c:97:ee:8c:e6:26:8c:4d:46:68:3d:c6:21:6b:
         e0:d2:8e:17:62:5d:a3:f8:0c:8d:89:b5:30:13:02:36:f2:ef:
         bd:32:44:76:3f:d9:3a:ce:d3:d2:98:1b:c8:5b:c8:77:47:29:
         c4:fa:78:ae:d7:0c:ab:17:e6:d9:b5:81:57:13:f4:ec:7e:bd:
         5c:55:15:77:bf:da:b9:0d:96:05:ae:b7:b1:7b:80:23:0c:6b:
         c1:19:bb:4f:bd:36:68:3a:83:6c:76:a7:91:78:a6:37:b6:9e:
         35:0a:fe:ce:19:f8:e7:c0:ee:ff:e6:25:5c:d7:5b:79:72:7e:
         6f:6e:14:78:5f:ba:26:d3:a9:b4:03:37:7f:7b:56:e4:a9:af:
         0e:4d:64:27:da:b1:a8:1e:c3:36:45:56:fa:e1:a6:02:f9:c0:
         e1:11:65:ff:c5:de:98:d1:6c:8a:46:ec:da:11:3b:b7:cd:62:
         c6:74:48:43:64:be:be:c0:88:bc:a8:c8:74:51:12:d8:ed:5d:
         9e:0e:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:36 2025 by rpki-client