Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/59d61050-3804-3433-aa08-2184d2a16bd5.roa
File:                     59d61050-3804-3433-aa08-2184d2a16bd5.roa (raw, json)
Hash identifier:          NWikn2cafjCL+AhPJhgJr+wsqKTBUYJUTG3pz8RqHd8=
Subject key identifier:   3C:6D:2A:57:73:79:98:F2:C3:25:87:50:C0:80:0B:47:E0:7A:6C:BC
Certificate issuer:       /CN=65249710-7b94-4fa1-9980-bf1dc5d20857
Certificate serial:       010D0C9F4328584886B078AB81ACF0783CDA8FC0
Authority key identifier: D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/59d61050-3804-3433-aa08-2184d2a16bd5.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     18676
IP address blocks:        135.105.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:78:ab:81:ac:f0:78:3c:da:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65249710-7b94-4fa1-9980-bf1dc5d20857
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=4501f585-dd7c-4170-9995-e83bc1fa8561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:db:c3:b6:59:38:53:10:14:1d:fb:e5:ff:
                    58:3b:bd:e2:8c:9d:50:3d:09:0c:9d:3c:9b:0b:d8:
                    71:81:08:f2:63:49:7d:02:0b:8b:06:34:64:a6:c8:
                    52:c7:94:d4:09:66:8d:57:df:dd:ac:4c:9a:0b:62:
                    24:2b:d9:5b:af:b8:10:e1:6c:1f:90:fc:03:a7:a5:
                    0b:1f:5d:ec:f3:96:26:0d:0e:72:de:3e:59:5c:5e:
                    c5:4b:5c:d0:e4:63:fd:cc:0a:a2:97:6f:32:db:e5:
                    c2:a1:eb:5a:fb:ad:a2:3a:80:2b:e8:6a:b7:c0:35:
                    40:fa:ab:7f:17:2a:62:a6:4d:f6:a9:02:8e:fc:7d:
                    06:66:50:2e:a9:f9:e3:c0:3f:ca:61:e4:b2:7d:28:
                    9d:4b:5e:b9:14:3f:17:94:72:6a:04:f1:01:65:6e:
                    25:56:1f:b1:6b:94:dc:7f:5d:e9:ca:4f:46:0e:44:
                    45:6a:e2:83:6e:2a:5f:10:67:cd:d5:fb:cd:ea:46:
                    98:b1:0a:78:93:9a:b6:15:85:d2:45:ba:b9:49:7e:
                    cf:db:04:7f:a7:8e:9e:5e:5c:00:2e:06:f8:b7:d6:
                    e8:80:60:c8:6a:81:4b:a8:b3:00:d9:10:92:b0:e7:
                    ee:36:f8:09:c2:ef:73:8a:4c:47:67:82:f4:ab:4b:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:2A:57:73:79:98:F2:C3:25:87:50:C0:80:0B:47:E0:7A:6C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/59d61050-3804-3433-aa08-2184d2a16bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.crl

            X509v3 Authority Key Identifier:
                keyid:D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.105.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:40:b5:be:af:1d:93:2f:54:64:97:7a:c6:ab:67:39:6e:
         d3:43:64:39:e4:65:8d:00:6f:1b:1b:5d:5f:47:b0:3f:1d:d8:
         d3:70:ec:1d:3c:a8:49:27:07:03:99:fe:96:1b:f4:57:b0:89:
         f8:df:6a:b0:fc:5f:93:59:55:c3:68:5f:bb:a0:a4:ca:64:f1:
         96:9a:e8:b7:bd:28:21:e7:83:89:b6:1d:b0:dd:52:7e:46:1a:
         94:54:57:a0:f3:a3:7f:06:b0:42:cc:66:84:a8:6c:d4:42:3c:
         db:38:b0:2f:5b:1b:20:41:59:1f:b3:95:db:9e:8a:9f:5e:41:
         3b:c4:0f:67:fd:a2:d7:3b:39:91:01:37:b1:78:9c:f4:c9:74:
         ae:a8:bb:62:b2:e0:d7:87:61:35:26:5f:ae:31:f6:b8:4a:58:
         4b:ad:ab:54:b0:5d:d4:22:d6:5e:71:ef:4b:1c:1b:04:35:c9:
         48:c8:1a:c8:58:f6:71:01:21:8d:44:1c:a9:36:0c:1c:01:6e:
         e9:d3:28:d4:4b:ae:02:ab:57:20:fd:d2:f6:1c:66:7e:84:23:
         7f:71:ee:8c:9d:e1:a5:b6:2a:b4:9c:77:eb:a3:69:19:cb:cf:
         51:1c:cb:37:d1:ca:62:c3:2f:ae:c8:de:6b:75:1c:ae:0a:b4:
         e0:9a:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:06 2025 by rpki-client