Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa
File:                     0d01bd33-7e08-326f-a0a3-2cc096265d22.roa (raw, json)
Hash identifier:          wPMPvptetb85eG9vKcZm+vuKyhh7SCyXOrWFYgVDq/Q=
Subject key identifier:   BE:68:26:B4:7E:35:28:3B:63:25:AF:F6:A1:79:FF:B5:AB:FE:2F:9D
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584836C839066DB31932794858C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa
Signing time:             Sun 15 Dec 2024 11:03:58 +0000
ROA not before:           Sun 15 Dec 2024 11:03:58 +0000
ROA not after:            Sat 15 Mar 2025 10:03:58 +0000
asID:                     6195
IP address blocks:        148.86.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:36:c8:39:06:6d:b3:19:32:79:48:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Dec 15 11:03:58 2024 GMT
            Not After : Mar 15 10:03:58 2025 GMT
        Subject: CN=4fc5a0ba-d811-4a94-9765-2ca3eb07a297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:58:7f:ef:69:de:98:8f:1c:a9:ad:01:2e:08:
                    e0:b5:45:59:d6:83:35:ea:20:28:1c:e4:05:78:fb:
                    ee:68:32:cd:fa:5f:16:4b:17:43:36:bb:a2:89:ba:
                    04:79:b3:ba:c5:3a:6d:d8:c4:bd:68:c6:21:e6:f4:
                    47:b9:85:c7:e3:56:8b:1c:7a:9f:ec:02:f8:7d:83:
                    28:f2:bc:02:b4:c1:c9:41:1a:d4:c9:10:83:01:b3:
                    93:39:01:58:3a:03:56:74:8b:b7:96:04:93:b3:bd:
                    d5:4c:2e:70:17:4e:42:31:0c:a1:e6:2b:ce:d9:9c:
                    7e:fa:7e:0d:53:61:1f:b7:7a:e5:a2:90:a5:21:24:
                    b7:69:e9:8d:52:14:ff:6e:28:cd:d8:8d:dc:63:6b:
                    4c:e0:44:45:75:f6:26:26:8b:ff:af:82:ea:58:75:
                    4e:91:48:9c:88:5c:3a:7b:d3:1c:6f:78:e5:89:34:
                    49:8c:ec:88:20:64:52:24:ca:b2:24:b7:60:a6:00:
                    bb:12:0a:e8:88:7e:d6:d2:c7:0d:43:49:41:ee:42:
                    1d:56:23:95:56:eb:b0:3b:aa:ff:3b:d7:2a:b8:73:
                    82:68:a1:04:2d:5f:fe:16:03:44:17:76:c8:2a:cb:
                    42:76:5a:77:fc:10:48:0c:64:53:b0:76:f3:46:e4:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:26:B4:7E:35:28:3B:63:25:AF:F6:A1:79:FF:B5:AB:FE:2F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.86.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c3:56:99:00:ba:20:8e:46:0f:87:d2:65:ca:2c:8b:7a:df:
         b3:3f:32:e4:7b:8b:67:40:ef:45:0d:5e:49:4f:dd:43:22:63:
         61:80:e3:4e:65:64:37:6a:54:ea:de:2a:7e:14:cc:72:9f:c3:
         9a:c6:5b:7f:c9:62:50:b6:58:d2:be:5b:77:08:04:27:54:2c:
         19:93:6b:e4:55:8a:8e:9a:22:6a:95:f2:13:14:f4:81:ab:a6:
         72:e1:0a:32:42:fe:9e:7d:24:2e:76:75:15:ca:77:f8:da:27:
         d8:5f:d2:75:44:e5:5f:61:88:ca:77:1a:ad:9c:db:93:8c:ae:
         e7:40:8a:41:1f:0e:c8:44:e6:6d:14:ec:be:be:35:66:51:70:
         d8:11:41:10:57:ff:17:73:c3:7c:4a:32:a4:2e:f5:64:c6:3a:
         9c:6d:b1:aa:d8:ef:5c:bd:1e:8f:f5:10:6f:a0:6b:ad:86:04:
         a0:a3:71:55:b3:a8:0c:f6:4e:04:88:a9:26:ee:5d:96:c7:ad:
         02:3f:91:e3:d6:77:dc:18:05:9d:7d:3f:98:f9:5c:92:51:1d:
         66:f6:eb:40:d8:54:54:f2:cd:eb:c7:93:2e:37:9f:40:e2:43:
         7f:c9:16:cf:f8:f8:47:79:02:df:82:31:69:3a:0c:91:7a:6c:
         b2:49:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:37:55 2025 by rpki-client