Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a3c26122-b4c8-31af-848e-34701da30d85.roa
File:                     a3c26122-b4c8-31af-848e-34701da30d85.roa (raw, json)
Hash identifier:          9QoYRimAsk/UmR1bOJ8+An/aOEEXJaEceFfEEhKI8Wg=
Subject key identifier:   9D:A2:F5:5C:F9:F1:4B:13:23:53:21:F8:9C:67:C9:73:9D:D5:35:75
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F4328584827C5300638244EBFED0522A0
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a3c26122-b4c8-31af-848e-34701da30d85.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     65128
IP address blocks:        142.51.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:30:06:38:24:4e:bf:ed:05:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=20fa188e-63cc-47c1-9f49-1d2f36068fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:b6:02:ac:f7:8f:fb:d3:e1:91:54:0d:91:
                    9a:8b:f3:4a:cc:73:07:cd:5a:7e:1e:84:6f:1c:f1:
                    c7:78:fd:96:a9:d4:df:fe:a3:a6:b0:75:cb:eb:18:
                    8f:0e:20:0d:cd:59:3d:51:4a:04:38:de:81:c1:fc:
                    be:e1:de:b2:e3:a7:dd:58:ee:52:33:df:be:39:05:
                    cc:a6:c7:9c:5d:83:05:b5:c2:8a:58:40:d4:bd:d9:
                    e2:ac:40:4c:f7:5f:61:4b:c3:f2:c7:1b:1e:6e:cf:
                    cc:66:09:38:19:1e:0d:20:28:e2:d5:86:c9:f4:7d:
                    5b:9b:ae:6e:3d:d9:75:8f:60:13:0e:21:be:89:fd:
                    bf:9a:31:7c:97:37:d5:83:79:74:4e:6c:67:96:26:
                    f7:2c:9e:5e:d7:d7:b5:7a:29:b5:41:ca:70:32:c4:
                    dc:8e:cb:3e:98:8e:44:ff:fa:88:2a:ad:70:87:08:
                    60:f3:7f:37:52:f2:b2:84:d3:a8:b5:7d:8b:96:35:
                    6d:b7:46:f9:ee:e1:55:11:8c:bf:9e:1a:6c:0e:ae:
                    43:55:3f:ea:f5:59:d7:3b:30:57:46:65:c3:92:21:
                    ce:da:80:30:e6:a9:62:fa:93:07:4e:70:95:e1:df:
                    4a:f4:4a:c0:0e:ad:2c:06:76:16:e2:67:15:f4:db:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A2:F5:5C:F9:F1:4B:13:23:53:21:F8:9C:67:C9:73:9D:D5:35:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a3c26122-b4c8-31af-848e-34701da30d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.51.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:d9:c9:40:30:45:f1:76:6b:7a:f3:50:ab:f8:ff:c8:8a:
         b5:b4:94:db:12:aa:24:61:a7:2e:25:c2:0c:20:b4:a6:16:99:
         2c:11:fb:36:32:18:36:3a:c8:49:82:d9:d8:8f:86:33:cc:4d:
         84:4a:df:f7:98:c7:7e:7a:59:8c:e8:01:b6:40:16:4e:33:a1:
         bf:8f:3f:50:f8:19:ae:48:12:09:21:25:63:90:31:5b:30:0a:
         7e:ef:7a:18:69:ec:cf:9e:4d:6c:68:11:5c:08:25:c7:63:9b:
         e3:54:d1:39:35:68:e1:dc:ed:1f:6c:22:b2:96:b0:66:2c:9f:
         6c:0a:21:e7:8a:52:9b:e5:b0:08:44:e5:91:6e:59:e6:09:59:
         f9:5f:35:ca:50:ee:54:56:19:dd:ec:a5:ce:04:b9:82:29:63:
         f4:2a:24:15:d0:d0:3b:2e:93:98:71:11:c8:8f:a2:aa:40:78:
         09:be:eb:23:aa:23:a6:c3:2c:c5:87:fe:12:c3:d2:e4:bb:32:
         16:30:cb:1c:32:e9:12:ac:6e:be:61:1b:48:a4:2e:06:98:0f:
         8f:61:43:d4:70:50:43:0b:c4:11:c5:5e:13:fb:f4:57:43:9c:
         0c:f9:dc:00:ed:81:45:59:f9:83:58:4e:1e:3b:a3:0d:45:4c:
         8e:37:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:31:38 2025 by rpki-client