Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa
File:                     fe040942-c808-38d5-8883-6e17e25019d8.roa (raw, json)
Hash identifier:          wsiH3nNqadMQmIXHTo+LjMYrgI622iTz1xrraNr4un8=
Subject key identifier:   A4:47:04:08:42:2B:93:CD:B4:25:42:1C:4F:40:BA:BA:26:F7:4D:02
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858484C102E9CAB565B4BEB714280
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     19905
IP address blocks:        162.254.248.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:2e:9c:ab:56:5b:4b:eb:71:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0528b233-8e2c-452b-b822-2c29819a8bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:8f:e1:02:81:64:fa:64:c7:ee:cb:34:0e:
                    ff:37:9e:1d:0f:aa:2a:e4:9d:61:b3:62:a3:13:06:
                    80:3c:71:b2:9f:82:7e:3e:5d:ad:6c:a6:0e:61:57:
                    56:ff:52:de:83:4b:cd:52:8b:87:71:66:0b:31:c4:
                    a0:24:8e:71:fd:97:0a:c5:9e:7a:6a:11:39:d4:cb:
                    41:69:dc:5a:c1:ab:e7:40:5f:98:03:e5:e7:d9:d7:
                    08:83:06:2a:56:10:52:06:d1:2e:44:b0:4c:cc:b6:
                    90:46:d6:14:ca:c4:85:97:44:c2:e2:79:f7:8f:6d:
                    15:4b:49:38:4a:a2:6e:6e:18:42:55:4f:d5:21:67:
                    1e:d2:e5:71:48:fa:9e:aa:0e:5c:b7:a3:e9:d5:eb:
                    1c:5c:fa:6f:44:9d:bb:d3:53:7e:42:46:24:27:b4:
                    76:65:6b:27:f6:e1:2b:1c:6c:0f:6c:2e:14:51:59:
                    dc:b7:80:32:4e:b0:41:74:94:16:f3:b2:60:1f:a9:
                    80:23:15:a8:0a:a9:a7:cd:6c:66:8d:1a:84:fb:40:
                    9c:60:37:ce:d0:43:fa:63:05:07:39:f6:df:73:78:
                    48:c9:fe:0a:d7:12:63:7a:48:ae:ec:d2:25:d2:2d:
                    a2:dd:64:c0:aa:7b:b5:d0:68:35:19:52:34:a8:41:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:47:04:08:42:2B:93:CD:B4:25:42:1C:4F:40:BA:BA:26:F7:4D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:67:b8:3a:9c:2b:21:26:81:0a:b7:b3:c1:15:7a:a7:49:b4:
         ce:fa:d7:35:4b:8a:64:a6:df:d7:aa:53:41:0e:a7:17:63:9b:
         ff:ee:c2:f0:3d:17:ad:a2:b9:92:ba:a3:23:53:4c:2e:a0:8b:
         bd:96:62:33:db:78:0f:df:89:13:cf:04:28:7e:8f:bb:31:c4:
         d3:b8:de:ee:0d:95:f3:3a:5d:ec:d0:e5:3a:95:c1:f3:7e:38:
         fb:92:d7:50:f2:6e:23:1b:29:4d:a9:9e:a1:d7:00:65:68:22:
         92:ca:db:80:30:18:2f:b2:96:0f:cc:3c:43:92:01:1a:33:40:
         8a:52:e9:04:5d:fa:aa:2f:8a:93:a0:96:1d:1b:9b:83:b2:39:
         5a:4d:53:71:f8:d8:92:10:d4:9b:97:0d:15:f1:8c:e7:2e:f6:
         84:78:86:2e:3e:e2:cb:d4:3c:90:00:5f:a0:ff:27:c7:37:b2:
         7b:9a:88:b3:bc:97:72:64:a2:b1:f4:1f:49:c9:27:ec:d7:68:
         08:73:66:af:a4:6e:5e:38:c9:e5:d8:cb:83:cb:7c:e0:bd:26:
         79:5a:62:38:54:6a:21:dc:2e:82:74:38:a8:2d:18:8d:24:f3:
         1b:94:5c:70:57:76:17:fd:c1:e7:60:b1:c3:eb:31:fa:a5:05:
         9e:8e:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:36 2025 by rpki-client