Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
File:                     f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json)
Hash identifier:          017/+xU2HF6enNQtIqkG5MpDnIqMWV5B4MV5UsaawTU=
Subject key identifier:   1C:BB:74:52:6A:8B:87:69:9A:A6:F6:18:5D:88:B1:BF:B1:C4:55:3C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EC0038FC47C7CBBE80D8900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     19437
IP address blocks:        131.153.168.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:03:8f:c4:7c:7c:bb:e8:0d:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=7cb8858a-1559-475a-ab35-c95ce2343eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:45:49:47:41:5a:67:9e:b0:8e:c7:a4:6c:
                    43:e3:67:97:6f:5f:6d:7d:2f:b8:f7:07:82:45:84:
                    dc:c5:8c:98:0d:ea:bd:5d:c0:d4:eb:72:49:b5:ae:
                    ae:82:a9:e9:d3:e2:4c:25:76:a7:d6:92:39:45:a4:
                    fc:f0:b1:e7:46:c7:14:0c:73:ab:c4:b8:aa:ed:84:
                    c8:f7:32:4e:17:54:45:4b:e5:ef:cf:8d:84:da:f4:
                    81:e7:b1:95:65:c4:f2:0b:c6:a1:b1:89:54:46:38:
                    01:0c:34:58:37:25:19:53:e0:03:c5:f8:4b:3f:3e:
                    cb:26:04:da:1f:e5:12:b5:7b:98:66:08:1c:44:c4:
                    42:3b:85:0e:d1:80:31:4f:53:31:e2:0b:da:63:35:
                    16:68:c3:15:b0:85:da:fe:20:b8:2c:26:0b:18:aa:
                    80:98:f9:b5:5e:d0:20:1b:68:99:e5:1c:9e:e4:3f:
                    11:a4:18:70:c9:b4:69:85:67:2f:5c:c3:49:a2:8d:
                    79:a8:0a:7d:35:ed:09:4d:bd:fb:d2:94:7d:cd:9c:
                    cf:50:a7:cb:5b:bb:1e:da:aa:e1:14:77:9a:08:f0:
                    24:b7:fd:4f:27:74:ab:b0:54:6a:cf:b0:c5:03:7c:
                    98:3a:f5:5b:e5:44:f6:0b:6b:49:eb:a3:ab:60:da:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:74:52:6A:8B:87:69:9A:A6:F6:18:5D:88:B1:BF:B1:C4:55:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:c6:d5:53:6c:cf:b1:e3:61:82:c2:80:70:8a:d1:89:1e:
         75:d1:cf:28:04:3f:7a:cf:43:bb:c0:b5:a0:27:ec:c1:0a:34:
         7e:56:f2:94:63:aa:6b:ad:f4:13:26:33:ab:dd:1c:a8:ca:46:
         5a:cb:88:41:14:41:6f:d8:22:1b:25:e7:a9:9f:fd:51:4f:45:
         16:42:e2:8b:97:dc:5d:4b:4a:fc:65:24:6d:22:73:b2:bc:9a:
         20:32:d8:51:2b:50:df:c8:57:19:19:b1:df:60:6b:e0:76:6b:
         d6:35:67:36:da:b2:c4:c2:dc:ca:1b:47:c3:b8:9e:78:86:18:
         30:f5:58:b6:f5:d4:c0:3c:e8:66:7e:81:8e:e9:fa:45:83:4d:
         40:8a:ca:e9:33:f9:66:9b:8c:59:8a:45:c3:0e:77:5d:57:26:
         04:64:eb:ca:51:7e:97:53:46:cf:0d:80:01:f2:bf:16:cc:e7:
         1d:aa:7c:de:5a:cd:68:a6:61:d0:85:bd:94:80:45:19:a9:f5:
         42:54:7e:64:ab:be:80:49:83:3c:61:2a:41:a4:93:e3:43:0e:
         bf:89:93:27:0b:56:c4:a3:8f:30:50:94:5e:63:64:e8:69:be:
         88:d4:c4:b9:80:c3:74:c5:a3:f4:0f:8e:f0:65:d1:69:7c:bc:
         56:f1:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:16 2025 by rpki-client