Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
File:                     f46c48fc-eee4-350a-9887-1ba789ca5268.roa (raw, json)
Hash identifier:          d0qJpXl7cEyxVbVv7TC7qRksD8nAexbmVUtvVmGyknw=
Subject key identifier:   6E:D5:EE:F2:81:48:3C:A1:53:B1:67:C6:33:34:61:8E:08:F9:F1:B9
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8AF104328847E2B11080
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     208136
IP address blocks:        131.153.94.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8a:f1:04:32:88:47:e2:b1:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=c50bc348-c23e-4169-8177-3aac5e19a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:91:b2:b2:bc:37:af:40:f6:05:12:90:1e:1a:
                    31:1c:e7:fa:ac:ec:9c:97:90:53:e5:7b:c0:66:3b:
                    c8:41:67:fc:d7:44:30:be:48:1c:21:26:1b:97:0a:
                    74:8e:6a:63:23:b5:71:a1:a2:98:28:e3:d9:a0:83:
                    4f:5e:53:51:55:1f:a6:65:8a:56:0c:1d:71:58:9a:
                    f7:52:5a:cb:b5:89:80:8d:09:d0:86:fd:ba:51:ef:
                    9c:89:67:f2:6b:aa:21:2b:4c:29:d3:af:81:ef:5e:
                    10:da:3b:30:02:0b:bf:26:61:0e:f1:4c:21:d5:93:
                    64:19:2d:e6:1e:af:9e:9c:a9:ac:69:f4:8c:73:27:
                    94:6c:3a:b9:9c:f3:69:f7:85:cb:a5:01:86:4a:40:
                    08:9a:28:ba:c8:bb:5b:cc:8e:bc:93:a7:65:6f:3e:
                    a7:03:b2:66:a4:fd:f8:7c:9d:df:da:91:3a:7d:60:
                    68:cf:5d:56:55:ae:0b:9a:30:b0:0c:1f:2c:2b:32:
                    6a:26:2a:03:3a:0f:db:b4:4c:19:a0:8a:82:ad:aa:
                    e3:1e:ad:d0:7c:f8:2f:ed:b8:c6:f3:fd:a3:0c:26:
                    69:11:2d:6a:07:c1:e6:bc:21:94:39:80:ca:5c:74:
                    08:2c:ea:9c:5a:fa:fd:f4:69:72:06:bb:60:37:28:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:EE:F2:81:48:3C:A1:53:B1:67:C6:33:34:61:8E:08:F9:F1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:38:fa:b1:fc:7f:1b:bd:20:68:9d:12:79:9e:81:f6:a2:44:
         36:48:91:94:3e:7e:e0:77:33:51:28:f8:2d:38:71:86:d3:b8:
         25:46:ec:3e:32:59:a5:68:e2:3a:9b:7d:b4:e9:b2:17:92:f7:
         6e:60:2d:82:ec:e4:e0:c2:b0:89:15:ac:ef:5e:46:1d:3d:d2:
         0a:c0:5b:00:17:3d:a1:68:42:2b:22:ff:00:a7:80:33:35:82:
         79:36:41:87:ca:2b:b3:02:ef:3f:7c:02:cf:58:df:dc:1a:69:
         20:fa:ac:53:8a:9b:38:ed:5b:8c:f9:62:15:e8:63:e9:7f:7e:
         1c:88:3c:82:4f:89:0f:d4:83:32:54:33:45:8b:b7:2c:95:81:
         f6:ba:a6:25:ee:21:31:43:16:c5:92:e9:45:78:f3:6e:d3:42:
         19:d8:d1:f4:86:57:11:5e:9d:a2:0b:d7:6e:78:a6:54:24:2e:
         97:36:c8:13:d5:1e:80:9e:d6:01:5e:b9:e0:6b:a2:90:f7:9c:
         cf:a5:68:31:c8:82:49:ce:ba:9b:de:75:e3:b6:e7:a7:cf:f0:
         59:29:6e:20:3d:6e:f4:3c:75:ec:1c:af:0a:25:47:74:f9:0c:
         87:ad:84:a2:13:6f:e6:7b:dc:e0:2c:22:7a:23:ee:08:5d:c9:
         e2:9c:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:25:56 2025 by rpki-client