Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          ROgvDZO5U4X4UZ9i9OPzcm+sYibXDpYD8ZE1OPPlXH0=
Subject key identifier:   03:F8:E9:5D:58:50:D1:77:2D:46:50:B6:D5:53:61:77:3A:28:50:EF
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584812D529C6ABB156B13B0EC600
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     12097
IP address blocks:        24.140.24.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.40.0/21 maxlen: 21
                          24.140.48.0/20 maxlen: 20
                          24.140.64.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:29:c6:ab:b1:56:b1:3b:0e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=c3d4c201-bb7a-457a-be12-e345638e03ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:dd:03:d9:a3:ae:d9:d9:bb:84:6e:4a:73:
                    c6:e9:d6:6a:d8:a2:db:60:75:67:f6:6e:f1:72:eb:
                    32:bd:d0:2a:b7:6b:8b:ed:0e:11:c2:ce:0a:d0:ad:
                    ae:25:1e:94:85:b4:70:ba:ba:cd:d9:63:e6:fe:00:
                    9e:92:75:92:31:b3:11:fa:6b:00:63:75:3c:71:a3:
                    3e:b0:9f:f0:f3:dc:ec:4b:3a:3a:fd:0c:90:d9:00:
                    ef:38:69:8d:77:65:bb:5a:f3:f9:4f:cb:19:a4:e3:
                    6b:24:7c:f4:e1:b1:28:9b:b4:e0:e0:b9:b1:22:9a:
                    b7:30:4b:4a:de:d1:a7:4b:d7:fc:29:c5:38:88:b9:
                    ba:c2:a5:aa:1d:2d:bb:4e:a7:09:c0:f4:55:d0:84:
                    29:d7:e6:81:a6:6d:54:cc:59:27:4d:a2:6e:7a:ff:
                    14:e5:a4:35:97:cf:49:1c:7a:a6:99:b1:e8:79:93:
                    43:0f:e7:ce:4d:9a:71:57:e2:14:72:d6:b2:de:16:
                    50:8f:ab:fc:a5:e2:af:c9:62:eb:39:d3:4a:20:71:
                    78:cb:1d:6f:9c:ff:56:11:63:01:a2:35:dd:d2:27:
                    50:e0:69:cd:0d:4f:27:b0:2b:3a:1f:1b:14:7b:74:
                    6c:aa:93:aa:91:90:cf:57:92:9b:eb:6b:82:08:0f:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:E9:5D:58:50:D1:77:2D:46:50:B6:D5:53:61:77:3A:28:50:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.24.0-24.140.135.255
                  24.140.144.0/20
                  24.140.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e1:57:d5:ca:9e:7e:5a:4a:9d:d0:34:28:15:48:99:87:10:
         4f:37:b9:27:10:63:f5:c7:84:f0:4e:39:52:b9:6d:dc:83:1a:
         c6:3b:b7:e7:b6:aa:a4:08:ed:97:43:56:c1:5d:1a:ed:71:d1:
         80:5e:8c:28:6a:e2:64:34:0f:45:ac:4e:9e:51:5e:40:47:47:
         8a:17:55:81:cd:59:75:b3:3b:75:a7:5e:ff:2f:42:99:1d:05:
         1b:cd:08:19:80:29:01:8d:55:e1:01:23:9e:ee:11:14:04:fe:
         25:75:aa:f0:d2:2d:36:29:04:5e:2a:57:cc:f7:fc:e1:61:d2:
         b0:22:2a:90:74:13:3d:2a:f4:c1:ef:d4:9a:0c:41:db:13:e3:
         1a:c4:bd:cd:24:d7:91:55:b9:b1:54:f1:7e:4a:8e:1d:ec:e8:
         aa:26:54:76:b4:21:23:1e:49:e4:8b:62:39:8b:59:0e:1d:51:
         31:18:57:39:ae:3e:8c:30:78:82:b0:3b:93:05:53:f1:dd:69:
         42:36:30:3d:76:5e:aa:d3:6c:c5:70:5f:d6:e1:b4:f9:c3:6b:
         8c:74:69:f2:a7:cd:84:95:a9:0c:b2:bf:8f:07:fc:8b:98:22:
         60:d1:d8:37:49:38:47:ac:4c:3e:96:f3:6c:09:5d:fd:17:74:
         11:3f:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:50:06 2025 by rpki-client