Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa
File:                     d4f76b79-0fae-3718-bff6-2a57f01cb029.roa (raw, json)
Hash identifier:          Ls/HPyKLZCdDzXrQp78ryyvLVXaKW2EzSPjJo3hmo1U=
Subject key identifier:   2D:A7:5F:6E:29:D3:24:01:3F:FF:C3:42:5B:72:79:6E:C0:3B:F9:38
Certificate issuer:       /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial:       010D0C9F4328584861004C6042154AF77CA8B680
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     397031
IP address blocks:        216.146.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:4c:60:42:15:4a:f7:7c:a8:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=db377880-53a1-4955-8183-26b6043e8c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:18:7f:17:2e:79:4b:4c:1d:2e:74:b7:46:
                    14:ee:cf:a4:2f:2f:8f:d5:5a:ae:7d:9c:31:e1:d1:
                    04:ca:bf:10:e7:73:cf:ce:7d:52:e5:15:1f:aa:8e:
                    2e:bb:85:71:59:3c:58:54:4d:61:b7:da:8e:99:90:
                    7c:5a:d2:9c:70:47:5c:45:f8:7d:95:e4:f8:c0:af:
                    48:cb:aa:a6:b4:64:1a:bd:4d:a7:eb:4a:e3:b3:73:
                    d1:7a:e6:b8:5d:8f:d4:72:0b:bf:6c:03:ea:ad:68:
                    e6:0a:00:8f:22:3c:fd:07:0b:6e:66:f1:4e:b0:88:
                    f3:37:5c:c8:77:a2:75:6c:64:11:54:85:b7:1d:1d:
                    0f:0a:8e:71:7a:53:9e:42:ac:30:c3:04:f7:7a:77:
                    82:47:c1:59:fa:ac:a1:26:46:a6:93:f2:5f:47:74:
                    cc:84:84:0b:8e:bd:12:1e:7b:11:0b:4f:c2:8f:b8:
                    be:7e:ab:e9:1d:c6:95:f8:8a:f9:47:ef:3d:e5:ed:
                    72:1e:e5:96:51:92:4c:5a:3a:55:3b:6a:ee:1f:a3:
                    dc:13:c8:9f:42:85:d5:68:d3:2c:ae:75:38:16:a9:
                    65:2f:e4:64:b5:a2:8f:b0:41:95:70:09:48:ef:22:
                    db:67:0a:a9:db:39:23:54:fa:da:0e:b5:bc:b2:8b:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:5F:6E:29:D3:24:01:3F:FF:C3:42:5B:72:79:6E:C0:3B:F9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl

            X509v3 Authority Key Identifier:
                keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d2:47:90:dc:5f:46:90:c6:9e:3d:c2:4b:ed:6a:64:19:e5:
         77:5a:fd:29:dd:9a:1b:16:e4:b6:0c:13:d5:53:f6:f4:e8:7d:
         c5:b6:09:e8:87:b7:80:61:38:20:03:e9:16:12:aa:8d:55:9a:
         7a:83:52:fb:ba:82:fe:30:88:84:75:2a:dd:3e:30:ab:df:08:
         6d:70:14:43:f3:69:5c:ef:7d:bf:f8:c9:01:58:d6:c1:d3:c8:
         a5:83:f9:ae:5e:3e:f7:5d:ae:ef:ce:32:7a:c7:73:59:cd:0b:
         18:fc:e2:e2:1e:a7:45:9a:8c:05:8f:54:7b:2a:b7:e2:04:1f:
         f1:b6:e1:d0:0b:02:b0:ac:28:18:95:1f:66:d3:05:0e:9c:22:
         42:ca:7a:5d:23:a3:27:c8:8b:3d:3d:e7:8c:89:0a:a2:11:2f:
         02:b6:eb:ff:7d:5c:f5:0c:c5:82:11:4c:01:4d:76:1d:be:ac:
         e4:d6:fb:80:65:cd:48:e4:df:1c:6b:3f:3d:29:c9:cc:ce:40:
         d2:69:50:a8:47:51:26:26:4f:b6:21:11:d2:fb:ba:f6:a6:d6:
         4a:e5:cc:5f:ec:6d:38:32:94:e9:db:42:de:41:3e:b1:6a:07:
         af:f3:38:e8:61:cb:68:5c:3c:fa:e8:d4:41:83:c3:ba:8d:22:
         e4:bb:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:51 2025 by rpki-client