Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
File:                     457189b9-d3a9-3217-8a43-0445470cc4ed.roa (raw, json)
Hash identifier:          iGadVfa8gelv1ZDwFK9XrUw/OeRrrOO54TK1693rGrg=
Subject key identifier:   82:3D:8E:31:0D:41:5D:BB:4F:B0:94:BF:97:B0:C0:4E:F5:A3:9D:D5
Certificate issuer:       /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial:       010D0C9F4328584869606A7EAE620E0BA9BBC668
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     271
IP address blocks:        192.146.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6a:7e:ae:62:0e:0b:a9:bb:c6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=8a4ad083-b1d5-4726-b318-af7ef2ee5b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:3f:af:b7:99:26:b6:b8:a3:62:87:c8:cc:
                    20:e6:79:32:ba:75:57:76:29:09:2c:db:d6:e1:3a:
                    14:a7:40:69:01:7c:c2:5d:3b:3c:09:cb:6b:b2:b5:
                    2e:b3:f8:8e:33:6f:e2:d7:04:3a:79:b0:e6:24:5a:
                    df:db:bb:dd:3a:7b:e8:23:76:bd:9d:87:fc:d2:d4:
                    f3:2f:8e:bd:78:af:3e:92:26:08:e8:fb:6a:5e:f5:
                    90:a7:01:0b:d9:01:4c:33:3b:fe:06:6b:d2:fc:25:
                    04:21:76:26:ec:78:ec:07:93:29:99:f9:9e:28:e4:
                    b0:08:25:cd:e2:fc:6e:c5:41:28:ad:c6:9d:f4:d5:
                    cd:25:f4:fd:b1:ef:a9:db:46:50:db:15:7a:17:b5:
                    47:be:53:45:a5:3c:9d:f2:bc:8f:0b:25:4d:14:5c:
                    f2:ce:e6:14:c7:e9:78:ac:d3:41:69:6f:d4:fc:a4:
                    52:a8:78:da:6d:1d:39:25:ee:23:34:f0:e3:c8:61:
                    cf:41:d8:30:bb:69:c8:de:cd:90:14:87:55:22:27:
                    53:8d:e9:43:54:bb:36:48:78:90:3b:c7:4d:21:8b:
                    16:bb:cf:92:6a:36:c7:5c:dd:a8:bf:50:44:3d:d4:
                    d2:29:68:e1:1f:82:d3:29:c4:62:8b:56:60:e3:bf:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:8E:31:0D:41:5D:BB:4F:B0:94:BF:97:B0:C0:4E:F5:A3:9D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl

            X509v3 Authority Key Identifier:
                keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:5d:90:e5:f2:d4:d5:90:e8:65:aa:35:60:c8:b0:ec:13:
         d9:62:d8:d9:80:96:68:1c:53:b8:5a:d6:48:40:aa:9a:14:12:
         cd:e0:71:8e:67:01:96:87:5a:5a:71:d8:4a:7f:ec:ce:18:0f:
         14:7d:09:b4:a2:30:80:66:53:e2:d0:a4:95:67:06:13:f3:a8:
         ff:78:7a:7e:a1:6c:f1:9b:e1:40:e1:c7:3e:a7:31:d5:c5:01:
         c8:c0:9d:bc:3a:e2:31:ae:b3:be:62:13:2e:58:92:8f:5a:c2:
         af:01:61:db:ad:9b:c0:4f:17:46:cf:af:21:23:b0:b0:33:b7:
         87:03:48:6d:bb:a5:96:31:33:57:6b:3e:b8:6f:91:7e:7f:a0:
         fe:16:3d:b5:7b:bc:9f:42:41:2b:25:f7:23:31:c0:2d:5b:38:
         2a:bf:19:77:95:e2:8e:f2:b5:f0:83:76:cb:d4:c3:5d:c1:64:
         ab:11:dc:32:6c:8d:1f:c8:c6:dd:fb:43:b4:b4:6f:71:01:ef:
         7c:02:95:81:55:ae:c8:8c:b0:d8:6b:19:ce:88:52:d1:53:7a:
         b8:1b:d9:45:91:75:c4:ac:ae:1c:07:76:f9:ca:c9:6f:95:9c:
         74:24:ca:a4:02:99:30:37:15:4b:a8:7b:9c:c9:48:c7:da:29:
         f0:d4:8e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:29:36 2025 by rpki-client