Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa
File:                     4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa (raw, json)
Hash identifier:          DuwO1QHm+GCEHb/ZQnd04kxuhLzjOCo9LkpZ7LFBXvk=
Subject key identifier:   FA:BF:A6:12:8A:78:9A:AD:AD:CD:80:38:0B:B8:87:7E:EC:65:F3:8F
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584851A57D60493538C88ABFA000
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     13213
IP address blocks:        173.255.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7d:60:49:35:38:c8:8a:bf:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=943c380f-84b0-468a-ac87-8c9bf1f276f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:18:ba:13:46:74:0a:19:9a:62:50:ff:c4:
                    51:33:8c:07:72:86:45:03:85:99:f7:0e:9f:55:0e:
                    b4:fe:83:bf:f2:7f:9c:68:13:78:ea:d6:18:cd:14:
                    ca:dc:09:bc:3e:bd:6a:63:07:53:98:f7:b8:73:18:
                    45:b4:5d:8f:4d:f7:53:93:b8:4d:f2:5d:62:7b:bd:
                    95:82:f1:25:59:22:e6:2f:a5:6e:29:74:d9:02:c8:
                    c0:26:96:0e:5b:5f:b8:73:bb:21:a8:92:76:63:22:
                    90:bf:0a:0c:4d:e2:84:1e:7b:aa:1c:f4:b5:58:ab:
                    0c:c0:3a:ff:07:86:be:ad:ba:34:13:d8:14:61:eb:
                    26:30:ef:58:8e:cf:ab:83:b0:48:da:42:4a:69:5a:
                    b6:a0:66:38:49:d6:77:92:5d:ec:0d:26:0b:82:0e:
                    83:a1:6a:69:69:da:dd:27:99:eb:66:57:72:3f:43:
                    28:02:f3:40:3b:1a:b3:c0:eb:6e:4a:00:c8:5a:48:
                    d4:9b:aa:f6:6a:06:cc:01:af:fd:00:62:04:14:0d:
                    10:10:54:d4:86:0a:b8:4b:06:2e:1c:4f:f5:78:67:
                    cb:ef:3e:96:43:bd:47:ca:cf:d5:ea:41:e3:77:74:
                    c6:8f:30:ad:1e:5e:f8:16:df:3d:28:e4:8c:14:25:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:A6:12:8A:78:9A:AD:AD:CD:80:38:0B:B8:87:7E:EC:65:F3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:18:c7:8a:e7:9e:c7:5c:e3:9d:fd:e0:78:45:95:18:48:12:
         cd:a5:f0:36:92:0f:21:bd:a8:39:b8:b9:0e:a1:1e:28:0d:4c:
         71:23:7b:b3:f9:5c:76:66:8b:03:d4:52:29:e9:47:d8:0d:cc:
         0d:b7:41:c6:72:b6:4a:79:a9:bc:e8:a1:65:b8:15:50:fc:c0:
         6c:0f:00:a2:a7:38:71:7b:47:ef:72:33:53:fd:a3:a3:9a:c9:
         d5:73:a1:37:ec:c8:4b:ee:58:24:ad:ed:9c:0a:a6:73:55:d8:
         0d:1b:68:55:ae:b0:ef:8e:05:09:d6:6c:8d:87:5f:2d:ce:c3:
         42:b9:d9:9e:92:ea:a6:16:aa:5b:a5:d8:f4:9e:97:ca:a4:61:
         20:03:98:84:b8:d8:d4:40:7d:2b:64:39:9a:f5:75:0c:96:3e:
         72:94:c9:89:c7:f4:33:10:6e:3d:6d:97:a5:a8:ce:da:a9:66:
         11:75:0d:69:f7:39:d5:fc:5f:c4:96:57:be:6d:64:7b:be:2b:
         75:92:58:02:1b:60:c2:4b:56:11:db:36:c6:04:cb:e0:c3:d4:
         71:a4:ad:a4:06:4e:f1:d2:91:19:04:26:9f:d3:85:f2:d3:7c:
         30:b0:e2:83:27:9b:a4:13:51:e4:b7:9e:85:5d:92:ef:07:89:
         74:72:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:30 2025 by rpki-client