Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa
File:                     e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa (raw, json)
Hash identifier:          nRV9P03Dw0IuUmCxsUsliDod22w5VflKoiOXxzwokVQ=
Subject key identifier:   D5:00:B6:20:A3:13:09:EC:C5:06:60:DB:72:14:91:7F:2E:38:62:8A
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584836C86CDD19AC072DEB95DD00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa
Signing time:             Sun 15 Dec 2024 11:04:22 +0000
ROA not before:           Sun 15 Dec 2024 11:04:22 +0000
ROA not after:            Sat 15 Mar 2025 10:04:22 +0000
asID:                     6195
IP address blocks:        148.86.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:36:c8:6c:dd:19:ac:07:2d:eb:95:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Dec 15 11:04:22 2024 GMT
            Not After : Mar 15 10:04:22 2025 GMT
        Subject: CN=c8e696de-8454-4d69-83da-2a3f11a8293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:2d:44:5a:d2:ee:e2:fb:67:a1:d8:5a:9f:
                    ea:b7:fa:7b:59:2b:68:6c:31:a1:81:ec:2b:89:06:
                    0b:5a:8c:2f:89:01:54:58:0f:8d:83:e4:1e:d4:7b:
                    2f:14:9c:a9:0f:46:91:c8:7e:b3:2e:78:51:7f:18:
                    01:6f:e9:27:61:52:50:cd:40:73:46:ca:e4:f0:23:
                    a2:45:51:c1:9a:e4:89:3c:58:80:9f:10:8d:04:84:
                    84:88:b2:b1:11:60:a7:a0:54:7f:cf:03:50:0c:f9:
                    0f:ad:fc:bd:77:ca:3e:0d:99:68:16:8c:f1:9f:99:
                    53:e0:47:00:89:e1:af:e2:8c:32:73:94:6e:0e:69:
                    e9:53:63:e5:74:27:69:ab:2c:f2:b8:34:12:41:b7:
                    81:9e:d1:cf:b0:7a:a5:3b:d1:83:b1:4f:67:a9:88:
                    13:9d:ec:eb:eb:27:1f:8d:65:d5:3c:a0:c8:5f:11:
                    b4:18:79:d3:d8:f1:b7:9e:2f:2f:69:36:15:5a:16:
                    6e:36:28:5a:73:95:7d:40:4b:3b:fc:82:9a:bf:b8:
                    c0:16:d3:c7:6e:10:5e:40:f3:fa:11:9e:3e:20:4b:
                    1c:ce:b2:6e:6d:8a:31:f7:ba:da:60:a8:57:3a:09:
                    44:d7:a4:0a:3d:e1:1d:eb:83:9e:a6:29:8c:ce:d4:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:00:B6:20:A3:13:09:EC:C5:06:60:DB:72:14:91:7F:2E:38:62:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.86.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:28:73:b3:a3:ae:63:a3:a4:e4:be:b5:34:c0:02:cb:21:eb:
         34:8c:7f:87:ed:e8:e2:d4:aa:b6:64:1b:25:62:c8:7c:37:e5:
         4a:69:46:d6:e6:ad:98:fc:7e:40:ff:1c:ed:9f:96:d5:31:34:
         35:b5:3e:1f:0e:2f:39:34:f1:a4:67:59:cd:71:fd:3f:0e:bf:
         df:74:b6:5a:7d:bb:c9:f1:e8:21:38:60:fb:6b:f1:c9:88:2d:
         ed:65:39:eb:59:71:bf:fe:f2:10:b8:38:3b:f1:fa:93:48:72:
         a1:53:2b:a8:4d:5d:47:86:02:95:2a:4b:c5:31:13:58:29:93:
         f0:79:e9:10:9f:d6:36:01:e5:1d:83:78:c3:35:c3:b5:ee:16:
         0b:15:a1:4a:86:19:e0:d8:d2:84:6c:23:6a:04:e0:2c:1b:2e:
         f4:f5:c9:04:1d:12:ce:bc:da:0d:9d:91:55:40:70:27:eb:36:
         26:f6:d3:7d:57:fa:09:b6:4f:16:37:1e:aa:58:9e:f5:5d:2f:
         98:17:63:87:02:63:cc:b8:ba:1f:89:fd:4a:fa:77:33:76:d3:
         4d:90:c9:f6:5f:85:63:10:bb:08:f3:aa:cf:55:67:9d:1d:a2:
         2a:28:06:93:bb:7b:48:ff:8f:f8:d1:56:2d:d0:94:b8:14:de:
         e8:c0:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:30 2025 by rpki-client