Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
File:                     69872d89-79da-3819-8185-7de21929d884.roa (raw, json)
Hash identifier:          4YvujUXWLG8XFJ/OJpF/ag/aBcIvg2y/ev1+M8phjrk=
Subject key identifier:   17:70:62:D3:EA:77:1D:09:89:24:38:32:63:5E:34:67:E3:9E:25:45
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285848504033562BDBF8BD31C12200
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
Signing time:             Tue 24 Dec 2024 14:00:53 +0000
ROA not before:           Tue 24 Dec 2024 14:00:53 +0000
ROA not after:            Mon 24 Mar 2025 13:00:53 +0000
asID:                     19437
IP address blocks:        131.153.238.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:40:33:56:2b:db:f8:bd:31:c1:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 24 14:00:53 2024 GMT
            Not After : Mar 24 13:00:53 2025 GMT
        Subject: CN=11000831-8cb6-4e4d-8e62-6362ae639391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:13:47:91:d3:aa:ce:1e:22:a9:48:51:19:
                    c0:57:61:70:12:62:4d:20:c4:26:8e:90:77:78:da:
                    4d:9f:46:eb:da:25:3a:bd:e8:41:d9:8c:34:02:0c:
                    6c:5e:5e:bc:99:3c:39:18:e3:aa:73:8d:dd:9c:79:
                    00:fc:ba:d7:86:34:3d:11:68:1b:f5:d6:57:64:be:
                    34:bc:62:cd:20:0f:bb:9b:c4:26:7e:ed:f4:42:5a:
                    95:56:70:80:77:42:60:30:bd:8c:79:0c:e5:b6:35:
                    b7:53:b0:8b:b5:fb:8c:e8:28:9c:3a:b6:7c:76:67:
                    c7:f5:e1:01:9a:c9:5a:54:77:ee:0f:96:48:c3:2d:
                    68:e7:55:fa:dd:8c:3f:39:00:ed:97:81:72:1a:cd:
                    9a:6a:63:9e:90:5e:f7:8c:0e:80:c7:72:02:47:d9:
                    43:aa:cd:22:2f:c4:40:66:9f:8b:75:c2:f8:d1:b5:
                    bd:77:8a:75:3a:39:2a:cb:24:27:2f:d9:09:94:d6:
                    83:48:53:57:81:4e:be:40:dc:e1:dd:8c:c0:44:f7:
                    fb:8d:9d:87:33:07:15:36:e0:07:3d:c0:6c:fe:f9:
                    d5:22:5e:85:f6:f9:e5:c7:0c:e6:13:5f:5a:f2:12:
                    78:19:91:bd:32:dc:f3:87:f0:f7:50:bf:a3:78:af:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:62:D3:EA:77:1D:09:89:24:38:32:63:5E:34:67:E3:9E:25:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:35:57:38:cf:00:dd:aa:fc:29:ea:30:71:f7:c6:ca:d9:
         50:11:01:58:03:bd:5b:31:1a:52:33:46:ce:e3:f2:a8:ab:7d:
         d0:93:59:e5:42:63:24:79:12:ac:38:75:00:a6:8b:39:f0:f0:
         30:95:61:46:92:bd:27:84:ae:28:90:e4:1b:64:24:02:b6:3e:
         88:d6:19:ee:ba:29:3f:ff:36:f8:a2:ca:bf:0f:07:18:3f:4a:
         2c:0e:88:e3:23:38:75:40:fe:2e:29:02:c3:6e:7d:a4:d3:6b:
         ed:23:50:65:36:6c:15:5c:75:93:c9:50:1a:b0:fa:36:c7:04:
         6a:26:50:d3:a7:b0:71:8b:be:2b:d4:42:bc:db:c9:6c:0a:e9:
         f4:37:1d:69:3b:72:d3:d0:f1:2b:e1:4a:16:2b:96:6a:bf:be:
         2d:1e:2b:4c:10:85:7e:8b:d7:ae:04:99:14:df:a6:b2:d7:33:
         b2:f0:c1:0d:3f:8c:d3:56:80:d1:51:29:33:bf:3a:94:3d:62:
         95:1c:a6:da:75:c6:f8:fd:88:32:3b:7c:f3:4d:ba:b3:1e:d2:
         2e:2d:1a:f5:0b:a0:d1:91:78:c4:2e:aa:3a:11:9c:38:c0:e6:
         05:d0:03:0c:c3:5d:28:a8:88:6d:0b:e1:d1:53:d8:9b:a2:3b:
         45:d0:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:19 2025 by rpki-client