Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa
File:                     65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa (raw, json)
Hash identifier:          7UdB/7BeRTDd0wYbkNgZ5TYSBinePgZ9WUAO+3Lpn0w=
Subject key identifier:   B7:A6:C7:7B:82:B9:A6:DB:A0:F6:B3:91:84:82:3A:1F:13:63:AC:A2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285848265FF7D11CA1084AAE49B2C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     271
IP address blocks:        142.231.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f7:d1:1c:a1:08:4a:ae:49:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=6cc1dfdd-2cf3-424d-ad47-c02974e1539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:62:5b:4b:6a:e3:f3:8c:42:30:f7:23:52:
                    b9:f8:34:8a:7a:ab:e0:e8:c4:1e:63:3a:0b:24:71:
                    7a:a4:25:23:d6:36:74:ff:4a:6b:7b:fd:66:cc:69:
                    1c:dd:ab:41:bc:6d:c3:23:23:f6:69:3b:7b:f8:00:
                    8d:9c:35:9e:de:3f:5f:d0:53:9f:ca:9e:51:f1:7e:
                    15:82:63:9d:f9:29:b7:55:30:4b:e2:bf:6b:25:62:
                    94:27:d2:b5:f6:79:63:42:d1:b3:3a:73:48:dc:8a:
                    65:6e:ba:29:16:c5:4b:a5:c6:38:5e:44:09:b0:40:
                    b3:78:b6:49:38:79:69:65:96:ba:8e:49:73:9b:2c:
                    af:5a:a8:cb:8b:40:10:01:1e:e1:2a:ab:60:d3:e3:
                    1c:60:26:fc:cb:21:10:c8:b6:78:b9:4b:8f:ad:02:
                    82:31:2e:8d:53:1e:5c:80:0c:18:97:2e:23:f9:6a:
                    79:2e:2c:60:cd:32:ff:8f:fe:b0:1c:3d:d7:51:25:
                    bc:51:35:04:6d:53:0d:72:f6:ea:fa:ef:bc:90:25:
                    66:52:7b:56:39:ff:e8:db:f0:78:32:c3:3b:f8:6f:
                    92:64:ca:49:aa:e0:41:2d:86:18:15:c0:7f:65:e9:
                    d1:d1:a7:9a:5a:48:e4:80:84:ae:6f:b8:5f:02:fe:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:C7:7B:82:B9:A6:DB:A0:F6:B3:91:84:82:3A:1F:13:63:AC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:45:1e:68:8a:6a:29:74:8b:f3:e3:04:c7:66:68:52:43:
         e4:13:e0:91:ff:cd:67:1e:aa:21:fc:c8:de:c3:ff:1e:6a:a7:
         cc:4f:0c:5c:e8:8b:63:3f:fe:c0:63:f7:16:6a:e1:9e:cf:d3:
         92:c1:26:f5:ec:bc:4c:f6:fd:b3:75:37:ae:f6:12:8e:46:fc:
         3e:7c:4c:24:96:f2:dd:c7:88:30:e4:04:5e:d8:8e:d5:e3:10:
         0f:2e:2f:95:c9:34:67:65:0c:51:64:01:99:32:c9:cc:38:97:
         16:fa:9d:0e:07:ab:ca:2b:49:f2:6d:58:e4:31:e4:35:29:5d:
         ae:2b:df:d4:db:d3:d8:58:07:38:e9:2d:e8:c9:cb:c8:8b:df:
         51:71:a9:b9:fb:31:ff:cd:4a:12:a9:05:72:84:38:87:5c:58:
         d2:ac:9d:dc:ea:79:2a:0e:78:b6:95:9f:ac:5d:08:a6:ce:9a:
         ec:20:eb:d4:5a:f2:cb:54:06:19:d8:c3:1f:4f:d1:af:03:a8:
         ba:a4:06:ec:d0:f8:b2:54:b5:38:48:8b:47:3e:cc:66:16:a4:
         f0:8f:56:8d:17:e0:8d:b5:a4:39:b4:bc:72:f1:6e:b3:14:ed:
         4a:67:36:c0:5d:ae:42:f7:7f:ea:44:44:4c:bc:3b:b5:12:2a:
         ec:28:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:07 2025 by rpki-client