Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1c26485a-2376-3e4d-b7c1-f599dc4cc462.roa
File:                     1c26485a-2376-3e4d-b7c1-f599dc4cc462.roa (raw, json)
Hash identifier:          iuTJDgxBWaZFrK7kfY0VTgIJmBQdJ9/eOkVwiwwG/ew=
Subject key identifier:   13:86:67:02:05:82:AF:B6:E7:6F:C2:3A:EF:78:31:5C:EF:72:FD:B6
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584840E553F3F0EF9528ED0C588C
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1c26485a-2376-3e4d-b7c1-f599dc4cc462.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     400238
IP address blocks:        147.185.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:53:f3:f0:ef:95:28:ed:0c:58:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=0880f168-44a5-4a21-9b99-3d08fb306039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:11:0c:d3:c1:2f:33:8c:e4:0c:17:ab:41:
                    1f:66:7c:be:58:02:8c:0a:02:f3:c5:f4:c2:2a:d8:
                    f6:ad:4e:77:b0:a1:18:52:9d:a2:da:09:16:11:fc:
                    62:73:e5:e1:74:7a:b3:3b:04:79:9d:47:a8:52:b7:
                    60:83:15:02:6f:e5:f3:02:56:9b:99:84:37:81:00:
                    71:53:e9:00:7d:31:8e:ce:ba:9c:57:64:ce:b2:b7:
                    57:83:22:ca:0a:a5:90:87:85:86:88:61:15:6e:56:
                    d2:15:db:54:c1:47:f0:72:ca:ef:39:a6:88:9d:f0:
                    26:35:11:ab:68:3c:3f:c6:8f:ff:d6:13:54:68:52:
                    9e:3a:06:32:00:d7:99:34:07:aa:b0:a9:fd:7f:31:
                    2d:58:84:bb:6b:52:9c:c9:78:ca:0d:09:18:b7:63:
                    05:cd:c0:80:ab:dd:6d:bc:60:86:22:e1:4d:aa:3d:
                    ca:6a:de:2c:5f:d8:9c:4c:44:f4:3f:c9:b0:f7:c1:
                    ea:ec:6c:1c:cb:d2:6d:70:56:81:ac:13:4a:bf:55:
                    12:88:57:be:bb:f4:53:89:64:64:87:de:37:20:5c:
                    4b:05:90:f8:d3:0f:6c:bc:02:01:4d:ad:80:1d:dd:
                    d7:f7:0a:d7:0a:50:9f:f8:e1:08:8f:1d:ce:cb:c8:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:67:02:05:82:AF:B6:E7:6F:C2:3A:EF:78:31:5C:EF:72:FD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1c26485a-2376-3e4d-b7c1-f599dc4cc462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:a0:16:07:cb:6a:4d:b5:2c:9f:ec:98:8f:83:6c:e3:7f:
         f8:39:5f:fa:6c:b8:54:77:22:4f:d8:83:56:df:b0:a6:bb:3c:
         08:1c:24:b4:9d:ff:e9:3d:49:d3:7b:56:31:17:17:4c:00:1c:
         81:b3:d6:42:e1:a5:d7:ed:83:d9:33:60:bd:39:6e:e9:a1:c8:
         7b:79:6e:2a:0f:45:9e:b1:1c:fa:19:10:c2:a7:c1:3b:8f:48:
         9e:d7:2f:81:7c:04:f0:b1:02:c4:42:09:6c:4c:57:16:e8:ad:
         d2:c8:90:ca:c3:de:08:57:45:44:f7:c3:e4:44:8e:cc:be:b9:
         0f:8b:f0:2f:86:ef:41:22:12:97:ce:12:c7:9b:03:a5:55:c9:
         aa:82:c5:96:d5:65:1a:40:81:4b:77:f6:33:97:8c:fb:7d:e2:
         18:b0:31:e4:2e:d2:81:6e:40:21:a7:94:3e:c7:b4:30:d5:8f:
         be:90:68:77:cb:ce:44:ad:c4:45:12:de:c6:a7:de:5f:d3:4b:
         93:9d:7b:e6:5a:9c:51:69:a6:d1:b6:41:dc:2c:48:48:7d:54:
         6f:84:da:bc:76:1f:17:10:30:94:16:5a:07:ce:f4:f8:ca:62:
         c6:a0:76:42:67:72:f3:a5:32:72:48:8d:6a:42:69:49:9f:46:
         36:dc:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:07:30 2025 by rpki-client