Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
File:                     5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json)
Hash identifier:          cxXehnu8kv5hP41e12Atqv7167mgLj9MhBAAS3rWIk0=
Subject key identifier:   6B:01:F0:EE:5E:08:61:FB:7E:DC:BB:EB:47:D4:05:06:F9:D2:94:FD
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EC003564FD825CAB5C19480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     19437
IP address blocks:        131.153.144.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:03:56:4f:d8:25:ca:b5:c1:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=60570f73-bd95-4b38-ba70-323e7068e81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:8e:cc:4f:9d:26:9b:37:86:ca:3e:73:74:
                    a4:db:d1:ab:f2:bd:75:7b:30:36:14:c5:44:0f:db:
                    f9:41:ff:35:3e:b1:0f:7b:3d:b8:e8:10:7e:a3:d4:
                    43:38:32:05:00:bd:02:11:a7:f5:d8:76:90:4c:ac:
                    7a:fd:08:4c:85:f3:ce:07:07:c9:17:fc:cf:b5:dc:
                    53:7f:b6:ec:a2:c0:7c:ab:ca:55:be:11:69:a9:81:
                    2d:54:ff:2e:ed:5d:dd:84:94:ef:eb:bb:79:c9:3a:
                    86:0e:63:26:f5:e7:8e:9e:ba:36:33:a8:d3:b6:a7:
                    dc:f3:b4:43:fa:66:1d:ab:a6:43:9e:47:14:f6:c6:
                    4d:21:10:4e:00:f5:b6:2c:30:3c:d8:9f:16:4c:3e:
                    38:2c:07:50:a2:82:94:25:f9:c0:f3:11:30:c3:29:
                    a1:15:00:29:c3:53:e0:34:d0:c1:24:d8:c9:49:26:
                    cd:a8:6b:97:f7:cf:f1:ed:17:b1:32:2c:91:2c:41:
                    e1:cb:c2:0a:50:e3:a5:3e:04:a7:8c:8d:f8:34:33:
                    b4:57:b3:a1:8f:56:de:65:5e:84:fd:09:7e:0d:a2:
                    cd:c4:c2:e6:c0:fa:32:6b:29:21:3b:b4:b9:02:d1:
                    1a:69:4a:23:e2:6a:4c:45:3d:c6:a4:3f:37:26:34:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:F0:EE:5E:08:61:FB:7E:DC:BB:EB:47:D4:05:06:F9:D2:94:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:1e:d8:a7:6a:b3:d4:00:91:b2:ad:6b:a9:54:ab:26:48:
         0b:85:5e:ae:b4:82:f5:30:27:c7:a2:b9:54:5b:e1:55:ba:31:
         f9:97:2a:6a:6c:ce:2d:c5:e1:38:5a:0a:24:54:0c:ef:ee:38:
         dc:33:fd:bc:96:8c:80:7d:8b:b1:2e:29:19:6e:62:67:82:ec:
         78:2b:a6:04:cb:52:f3:79:14:67:b4:58:d2:e9:69:87:9e:9c:
         5a:f6:6f:21:e1:44:b8:92:da:1f:b4:7f:61:0c:07:c6:68:b3:
         e4:a3:32:1e:67:d4:a2:a3:40:2f:b4:07:a2:cf:72:46:f2:ff:
         90:56:18:ca:a1:05:18:51:37:32:39:05:1c:14:e2:7d:59:71:
         2b:0b:60:6a:d0:e3:e3:c6:51:22:53:0d:68:c7:d8:d8:6b:7a:
         36:50:28:72:9a:5f:9e:0c:60:93:86:b0:63:59:1d:bd:e6:08:
         d9:e2:2d:d9:2f:ba:03:b4:27:4d:8e:9a:37:57:c5:db:d6:d4:
         21:b2:5e:3d:14:9c:f8:94:d1:4f:dd:a6:59:4c:d8:f0:87:ba:
         20:8d:17:b6:c5:01:8b:c5:bc:41:a3:e7:8b:44:6e:82:d8:85:
         25:87:20:6e:c7:5f:d9:30:be:bc:bc:a8:55:67:a1:a7:7d:43:
         9e:e0:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:23:09 2025 by rpki-client