Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
File:                     83b266a8-92b7-3018-a36b-711439e055e8.roa (raw, json)
Hash identifier:          CgDuQsmFiw8+eOgVeIHc8aMFknucmDr7d0qca8uZF/o=
Subject key identifier:   2E:ED:B9:30:6D:4E:EC:25:68:8B:22:1B:44:40:7F:81:AB:27:87:C8
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848424AC78CD4E85E4160C30960
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        107.148.161.0/24 maxlen: 24
                          107.148.162.0/24 maxlen: 24
                          107.148.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c7:8c:d4:e8:5e:41:60:c3:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=978f1c32-ceb7-4a83-8fa1-35c74232835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:95:03:cb:ae:cc:58:bd:0b:f3:69:65:ea:
                    8c:ec:70:a2:b5:b7:ef:a4:27:83:bd:31:34:6e:44:
                    4f:49:76:bc:79:8d:c2:74:e0:20:4f:3c:8a:fb:3d:
                    7a:51:ce:09:79:ee:83:a8:2f:3c:61:2c:41:3c:08:
                    f9:24:08:ec:46:cf:70:f3:1b:d4:56:e6:39:0e:a9:
                    81:ed:0b:a4:44:70:cf:89:38:02:5a:60:8c:2f:59:
                    d8:52:8b:0b:d1:01:0c:27:48:7c:2e:e4:4f:e2:2d:
                    19:f3:31:5f:76:aa:03:3b:90:f2:d1:d3:de:c7:b8:
                    56:68:ad:e5:0e:0c:f5:3c:84:28:55:7f:0c:5a:38:
                    7f:26:03:c0:d4:0f:e3:eb:9e:af:1c:33:86:24:5e:
                    18:11:40:25:4b:a4:45:b9:86:85:6b:69:9b:0f:33:
                    5a:71:9e:71:2d:d7:2d:fe:39:4c:28:83:fd:19:36:
                    9d:bd:73:8d:e0:1e:77:62:d8:a1:e5:2a:4d:78:a1:
                    84:16:7b:fb:d0:d8:e7:75:cd:26:64:9a:c7:0b:0e:
                    56:9e:78:d7:6c:d8:dd:84:8d:8c:ac:bb:03:21:e3:
                    4b:85:71:e0:ca:9b:d5:c9:e0:3a:83:b4:c8:ce:b1:
                    ee:9c:bc:f5:b4:23:c2:5b:9c:21:be:95:83:4c:77:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:B9:30:6D:4E:EC:25:68:8B:22:1B:44:40:7F:81:AB:27:87:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.161.0-107.148.163.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:ed:cb:12:33:46:f8:15:d8:09:ae:b3:08:89:fe:88:0c:
         43:33:d3:08:90:a9:2f:54:4d:a2:0c:ec:62:80:e5:03:b7:31:
         c3:6b:9a:91:f6:e8:6a:cd:e2:e5:45:b4:7a:7d:96:ca:1b:a9:
         6c:03:61:d7:fa:d6:ad:22:11:76:cd:b0:ca:6f:e3:ee:3e:f2:
         3e:07:c4:68:30:af:51:df:5e:b7:08:02:b9:5f:69:df:fe:f1:
         44:f0:c4:6b:c2:23:aa:fb:8f:2b:06:f8:dc:19:73:bb:59:29:
         9d:ec:c3:e7:0d:f7:fc:6e:a6:7b:61:06:b0:36:bc:3c:1d:ae:
         d5:5a:af:36:3b:93:35:a6:5c:2b:ec:47:16:c7:e0:44:09:c8:
         1f:e6:1a:18:bf:92:c6:44:75:24:f8:3f:73:60:d3:54:03:1b:
         8b:f1:42:70:06:d9:8d:3d:a8:40:ed:5d:cc:a6:da:fc:d8:b9:
         c0:64:3e:7b:cf:05:04:3d:76:94:49:dc:f9:61:58:99:0e:b8:
         ff:56:f6:6b:33:a0:93:5b:25:89:0b:45:e7:df:a1:fa:59:62:
         30:1e:ab:00:5f:ca:e5:a9:9e:9d:5d:70:03:46:25:70:4d:d2:
         8c:ea:9e:8e:cb:2e:ec:06:33:b6:fa:64:80:60:8a:b2:af:d7:
         1e:f0:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:22:06 2025 by rpki-client