Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa
File:                     0d476707-0862-39f1-a07b-139b79e30ff0.roa (raw, json)
Hash identifier:          /B242fab4x7Tbyu3qbXluHcK2/9OWG4/lWtuWXsB5Xc=
Subject key identifier:   9E:80:5F:08:5B:27:E4:B6:A1:A7:F5:3C:1E:ED:F1:C9:FB:31:91:AB
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8A652288BDEC94AC5940
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     19437
IP address blocks:        131.153.81.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8a:65:22:88:bd:ec:94:ac:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=e2590153-6038-42a5-8f59-3b33f709d64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:3f:62:8d:f0:cd:d8:40:f2:c5:ba:04:33:
                    75:06:7c:53:7c:b2:98:47:fa:4c:52:db:c0:d3:02:
                    90:ba:1e:10:c8:dd:77:de:cd:a3:22:ce:a2:90:fc:
                    17:43:4f:9b:30:f6:dd:29:e8:4d:3d:eb:fe:86:ea:
                    9d:d0:b0:ec:02:95:24:dd:d0:df:46:df:78:52:c8:
                    16:72:4f:1b:f3:3d:b1:26:1e:c3:60:e6:60:b6:77:
                    b4:c2:89:4b:ed:f0:80:64:09:bd:76:dd:a4:70:fe:
                    75:2f:5d:9a:f4:8e:b9:cf:f0:94:dc:f7:6c:e7:0e:
                    71:ae:a4:3b:bc:eb:69:e8:6a:8e:6c:b9:7d:3a:28:
                    0d:f5:4d:83:90:82:ec:d6:df:24:8b:af:1e:c4:48:
                    17:cf:aa:dc:e2:e8:ad:e3:fa:a6:6f:2c:e0:54:47:
                    fb:ed:30:19:33:e2:4a:12:24:1b:79:61:ca:c0:28:
                    8c:5c:03:d7:99:35:f1:ad:61:72:3b:15:69:f1:da:
                    d9:30:bd:78:54:b5:bf:ea:c8:51:71:90:98:a2:5c:
                    a5:b9:07:c8:76:6a:79:d1:de:61:3c:19:2b:3a:61:
                    64:11:27:d0:bb:91:d7:49:be:cb:1a:a9:2b:89:65:
                    51:22:8a:75:2c:38:bc:14:c4:84:be:da:f5:ab:d4:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:5F:08:5B:27:E4:B6:A1:A7:F5:3C:1E:ED:F1:C9:FB:31:91:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:67:c2:16:a2:bb:14:1e:72:ec:42:9c:4e:a2:c3:15:ac:
         05:3b:a5:07:a9:83:63:4a:ea:27:75:d0:85:ec:ec:df:6d:b8:
         05:38:f7:48:ea:2a:78:9e:77:fc:c5:14:ce:2e:92:1a:59:37:
         a2:fc:f7:0a:f7:ea:6d:86:a2:5f:f5:48:20:d1:27:ab:c9:0d:
         44:2a:c1:ea:9d:35:5a:66:93:e1:ed:f0:3c:fa:7b:cd:75:b9:
         8a:5e:5b:0e:47:aa:6c:df:87:c8:25:ee:41:9b:22:dd:ee:bf:
         50:42:20:9d:38:5a:02:46:40:38:0b:a2:a3:4a:89:f1:88:38:
         39:b4:b8:34:bd:d0:f6:aa:8c:47:1b:df:5f:d5:3d:3a:d5:3b:
         fb:69:60:60:26:42:bc:8e:ab:6c:4c:62:07:72:03:d9:b8:3c:
         96:b2:e1:37:59:60:42:9d:03:d2:75:78:4d:55:ce:df:34:dc:
         61:38:fc:9a:eb:32:e0:66:36:4b:25:29:2b:4c:7e:f4:1e:d0:
         cc:b7:e2:b0:20:6c:7e:5a:0d:cf:e4:f2:ef:4b:df:43:fd:4c:
         34:ce:5a:58:f8:70:64:4e:2f:b1:21:fc:04:17:da:31:47:4f:
         c1:f5:0c:eb:d6:0b:99:eb:6a:de:e4:98:0e:f9:72:91:c4:e5:
         42:24:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:26 2025 by rpki-client