Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/485b979d-953d-35d3-81c3-c70a9bd78adc.roa
File:                     485b979d-953d-35d3-81c3-c70a9bd78adc.roa (raw, json)
Hash identifier:          HdLDTMpsRFkz76GC8s2PiCwbSO7zR8wfs2qjI/sI9no=
Subject key identifier:   3F:4F:C7:F0:45:9D:3F:E0:8D:3C:D0:F0:62:94:2B:69:F2:AC:C9:FF
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F432858484945723638090E6B7550D980
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/485b979d-953d-35d3-81c3-c70a9bd78adc.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     11260
IP address blocks:        24.139.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:72:36:38:09:0e:6b:75:50:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=46a287a2-a64d-45bc-af02-c5f412ad5c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:bd:5a:34:af:f1:9e:48:86:6c:b5:ee:70:
                    f5:79:5e:97:89:9a:ee:68:af:14:ae:59:e9:7d:73:
                    ec:6a:e5:a3:a7:5f:b1:2f:4d:a9:00:8d:33:28:e1:
                    10:34:23:a1:15:f8:82:eb:37:cb:ba:9d:0b:f8:20:
                    99:1f:a2:f1:fd:15:59:cf:84:11:ca:e4:dd:f0:42:
                    66:b9:de:67:1e:5f:08:b3:ff:f0:42:6a:09:c0:f9:
                    64:41:66:d9:87:a7:2b:b5:61:7f:43:39:b9:41:cf:
                    da:97:2e:9d:6e:42:f2:e5:95:c6:7e:42:63:88:40:
                    4e:95:86:b1:19:69:99:20:ad:f6:dd:cd:f7:c3:79:
                    59:74:d5:8f:8d:de:17:ec:37:b1:a3:a6:5b:9d:8b:
                    eb:dd:1a:65:a5:bd:82:77:b7:91:5c:ec:95:fd:07:
                    b6:e5:7c:1f:ca:52:ff:1e:cd:32:67:eb:e5:c1:54:
                    e9:d7:7e:ab:05:34:ef:9f:fd:07:1e:c2:2f:db:97:
                    6c:62:8e:47:a8:15:85:72:fc:14:cf:fe:ac:5c:eb:
                    74:8d:80:63:34:22:2e:bf:41:c7:24:39:f8:d5:0b:
                    71:26:d1:a3:c5:da:0f:98:7e:f8:7e:0c:18:5d:f7:
                    fe:09:6e:b8:a2:09:59:e3:4e:5a:40:29:8f:98:4c:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:C7:F0:45:9D:3F:E0:8D:3C:D0:F0:62:94:2B:69:F2:AC:C9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/485b979d-953d-35d3-81c3-c70a9bd78adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.139.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:74:c3:1a:a5:d8:d6:af:80:d4:3e:2c:cc:88:a8:c5:61:
         46:8d:1d:77:c7:04:24:fc:88:9c:6e:8f:29:20:72:5c:59:80:
         cd:c2:e0:7a:4c:69:87:27:93:b9:63:2b:e8:cd:51:69:f3:be:
         59:62:39:dc:2e:5c:92:c7:a5:9d:c9:8d:0f:d5:0e:d0:bf:59:
         08:00:88:0e:2f:d4:ae:f4:5a:13:d7:b6:21:b4:ee:2a:46:e5:
         eb:c4:11:4c:ac:b8:bb:ae:c7:58:7f:b3:25:92:51:aa:23:1c:
         0c:39:c9:ff:53:4d:95:a8:2b:c7:95:9b:9e:80:50:15:07:cd:
         17:cc:51:ae:f0:c3:a7:f2:4e:a5:cd:fc:ab:71:81:27:ed:3c:
         4a:d8:81:34:e7:80:9a:bc:fd:6f:52:4f:cf:fe:88:49:e5:4c:
         0c:bf:73:4d:0a:b7:b0:e8:8e:86:75:13:76:33:c3:01:21:34:
         92:bc:4b:0c:96:b9:ac:82:77:0f:01:94:17:9d:8c:fb:e9:96:
         09:eb:ef:c7:44:09:38:ff:00:9c:00:f6:80:4e:d4:7a:3f:51:
         19:7b:72:26:69:8d:72:37:0c:9a:c7:0c:05:08:cf:50:7f:58:
         e0:1b:22:d8:06:ff:9c:5e:9b:df:d7:6c:9e:9f:c1:16:15:80:
         67:26:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:08 2025 by rpki-client