Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
File:                     fed315c7-e9df-35c1-b17c-1e75b08b0642.roa (raw, json)
Hash identifier:          UU0Q5Qc3jHS8ZveKftOva6w+fCBvJ0Ldql6IG7F68vM=
Subject key identifier:   4D:4D:FA:33:6A:89:50:D6:68:EA:4C:E2:B8:6D:4A:59:EA:DE:CD:D5
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858486EF5C02BC39D7655C5AC3CA0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     399471
IP address blocks:        163.123.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:c0:2b:c3:9d:76:55:c5:ac:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=da8bb311-b9db-4c2d-9dc7-5e52871740cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:4f:e8:cd:6b:a4:dc:c0:0d:97:db:6f:2a:
                    53:16:8a:37:17:2b:22:c8:78:2d:9d:e2:07:c3:63:
                    d4:79:58:cf:a5:e8:5a:de:07:74:dc:84:e1:ce:42:
                    86:3e:67:9a:ab:66:6e:d4:37:3e:8e:3f:76:72:bd:
                    bf:91:ca:76:6f:24:16:a8:85:19:dd:81:dc:1e:f6:
                    bd:a7:fc:d5:37:58:ee:70:fd:c0:ba:14:10:60:93:
                    ab:ad:ed:0b:05:08:67:ad:12:80:8d:31:cd:c2:d7:
                    20:e0:22:8f:bd:00:8a:0d:3d:10:58:84:92:44:29:
                    a1:8f:ff:73:a0:b5:b4:96:ab:d6:98:82:f1:ec:aa:
                    a6:44:07:7e:09:6d:6e:50:64:22:a0:0c:fb:48:6f:
                    39:3b:43:83:ae:78:f8:65:11:34:c6:18:9e:28:6f:
                    9d:be:9c:09:44:27:cd:5c:03:92:f0:d6:9f:7d:17:
                    72:b6:7d:60:a0:98:32:16:94:cb:62:c1:78:d4:e6:
                    24:00:db:76:7e:ed:90:73:7f:4c:0a:f6:58:05:03:
                    0e:f6:eb:6f:cd:67:3e:84:e4:17:46:d3:5d:5a:55:
                    dd:b4:42:2b:2d:dc:80:55:94:5d:99:64:e9:50:6e:
                    4f:7e:1c:15:2d:48:eb:7e:8d:7b:80:93:19:70:cf:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4D:FA:33:6A:89:50:D6:68:EA:4C:E2:B8:6D:4A:59:EA:DE:CD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:22:63:73:6b:ff:da:0a:df:90:05:68:2e:20:61:05:6b:
         be:ba:5f:36:e3:2b:9b:55:24:ab:c3:06:13:59:8b:33:5c:7a:
         4b:e1:0b:38:25:04:55:d9:bf:7a:4d:09:70:98:42:ef:06:5f:
         44:37:4d:11:f8:88:68:fe:81:58:e7:47:6a:86:26:c3:99:56:
         53:d1:36:cc:0c:97:dd:3a:e4:73:22:6c:d4:4c:14:4a:06:d9:
         26:9b:21:77:2c:09:06:ea:59:33:ad:6d:d4:04:0a:1e:4b:18:
         d5:37:7b:3f:f7:1c:66:1b:85:f5:00:cb:c4:84:ee:ca:52:c7:
         17:03:f7:20:1a:ff:1d:1e:c8:84:ab:c2:9f:cb:21:0f:d5:eb:
         2d:65:c1:bd:3f:59:96:ee:16:6c:e6:34:39:f8:e4:f9:f8:38:
         b9:18:13:50:69:ce:95:d8:a3:09:3e:2e:86:cf:5e:e4:91:c7:
         bd:7a:ef:8e:d0:78:81:54:ce:55:1c:5c:5f:a6:d2:6e:0f:89:
         a1:bb:e8:77:df:87:01:61:f1:bb:35:83:b4:7d:94:f7:b5:3c:
         c2:bb:14:78:0a:2a:28:a8:56:76:cd:fa:a2:4a:70:2e:31:47:
         c9:de:50:89:ec:63:c3:b5:91:ec:2c:24:2f:a0:cf:74:0d:72:
         e3:a1:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:49 2025 by rpki-client