Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa
File:                     33da5a36-c016-3582-bf59-0f9738d7f8bd.roa (raw, json)
Hash identifier:          reP72jdVAkr7NMaaFtabSbf4YZgnSgNm7ssN7GhCWtY=
Subject key identifier:   13:9A:A2:E2:98:8C:71:DE:C1:8B:91:22:39:AC:1D:D3:F6:C9:B4:7C
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F43285848239548F1975ABC7DBE2DF9E0
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     6253
IP address blocks:        161.151.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:48:f1:97:5a:bc:7d:be:2d:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=14aa0af4-6980-4f53-b0c5-f32ce1ebe04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:b8:c0:35:f1:77:dc:b0:87:13:a8:5a:43:
                    ed:80:db:cd:e9:93:87:92:1d:cc:c0:59:93:72:a3:
                    96:6e:8c:15:64:60:d1:52:65:58:08:78:75:d1:51:
                    0a:ff:01:53:81:69:75:6e:ee:67:22:32:1b:50:e4:
                    84:2d:59:ad:08:52:de:3a:a8:25:a5:0c:c7:56:73:
                    dd:b8:41:9d:2d:c9:42:a3:84:d0:c8:55:16:e9:0c:
                    b3:87:9f:09:ef:37:08:3b:06:82:2c:92:3f:31:29:
                    56:fb:26:0b:26:6a:f5:87:5c:fa:ae:2e:fb:89:78:
                    82:95:38:d0:f0:62:9e:db:b1:01:83:be:57:c5:f6:
                    8a:56:8e:77:cd:d8:aa:20:35:66:e1:e5:2b:3a:31:
                    f5:55:59:51:c3:f2:4d:7b:a4:a7:83:18:33:85:6d:
                    d5:92:94:56:71:4e:32:d9:e9:37:73:d7:9c:c1:7a:
                    80:c7:9f:b1:fa:3c:c7:24:2b:9a:56:d7:b9:38:a0:
                    1a:b0:9f:d6:a6:54:c2:a2:13:d4:7b:60:3a:7b:cf:
                    73:df:ba:d4:ef:32:db:e1:42:22:ad:39:2b:ea:74:
                    a3:64:81:6c:22:38:1f:dc:eb:b0:5d:3f:31:7b:4a:
                    34:ec:92:c2:ab:11:f4:c3:ec:68:12:b0:13:06:eb:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:A2:E2:98:8C:71:DE:C1:8B:91:22:39:AC:1D:D3:F6:C9:B4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:65:9e:d2:2e:b3:48:cf:b6:73:51:3a:0e:ab:2c:80:5c:29:
         95:d1:41:00:a1:00:1d:d6:6e:16:b7:25:a1:57:f1:76:38:cf:
         0c:fb:b5:44:1a:1d:1d:3b:54:5d:2f:91:51:19:c0:8b:c2:48:
         0e:d8:90:d6:d3:d2:6a:23:60:2a:1e:54:96:d7:f8:db:3a:ce:
         59:93:6d:22:06:23:a9:c7:eb:a8:28:e5:9d:ca:dd:85:3c:bc:
         48:24:15:83:d7:a5:82:af:90:60:dd:58:99:22:da:77:a7:d4:
         00:98:da:77:5d:24:f6:8e:76:86:9f:e4:87:2f:68:02:52:74:
         51:99:41:e0:4c:89:28:16:3d:05:29:84:74:8f:88:26:2d:0f:
         5f:fe:a2:97:f8:be:76:37:62:11:5e:01:cf:61:0b:fb:1c:2c:
         07:9c:c2:d8:6c:00:82:2b:24:ce:2c:99:1a:cf:e3:53:0b:61:
         1b:40:ca:14:49:ae:e3:96:89:40:ca:60:11:3f:9d:72:07:a6:
         c7:28:c4:4c:0e:a9:3d:b7:09:8d:64:fd:23:27:69:b1:bc:57:
         d3:45:6d:d5:a8:33:ce:42:5d:48:08:e4:3a:11:37:28:6e:3d:
         98:05:ec:ea:8d:ad:53:94:da:cc:70:a8:19:86:e2:d6:be:ee:
         dc:f6:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:01:03 2025 by rpki-client