Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f54446b-efb5-3d49-a7d8-ebdf7cf8b37c.roa
File:                     5f54446b-efb5-3d49-a7d8-ebdf7cf8b37c.roa (raw, json)
Hash identifier:          YM5yqefV36qDUBFgfEtg+nsI3KQel1MSsFNNtGU9jyo=
Subject key identifier:   5F:BE:3E:C2:3C:86:F3:15:28:9D:12:81:67:D1:2E:6C:D7:8F:E2:1A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB68F705642EDEAD6AE280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f54446b-efb5-3d49-a7d8-ebdf7cf8b37c.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397219
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:68:f7:05:64:2e:de:ad:6a:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=bbcca738-3fc7-4699-aeb5-2e3d03494875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:bb:b5:9a:8d:b6:fe:46:d5:ca:b7:d9:5f:
                    91:ab:24:54:28:ee:29:c8:1e:01:16:da:71:eb:04:
                    87:be:41:4d:ff:7f:f7:be:0a:e0:10:cb:8a:6e:c0:
                    43:bc:26:12:3e:3d:b7:e7:fb:c3:2e:6b:09:b3:09:
                    07:2e:fd:9e:da:10:a3:c3:1a:78:ce:22:09:5e:47:
                    f3:6b:e0:d7:b4:11:33:19:09:ab:5c:6d:f0:16:e7:
                    a6:ab:5d:61:31:15:2b:bf:90:ae:45:8e:8e:ad:b9:
                    8d:88:14:6a:e3:89:17:6e:a7:74:7f:8c:97:36:e7:
                    dd:47:c0:97:2d:03:17:f1:c8:96:94:9b:9e:9e:02:
                    23:94:ab:ea:e6:a0:d1:72:5c:05:8c:fa:4c:38:83:
                    9a:1e:cb:7b:88:af:39:87:20:89:28:de:43:4b:4d:
                    74:e6:aa:32:3c:36:42:82:56:b8:cf:61:93:cf:09:
                    5b:08:37:a3:1f:0a:3f:dd:bb:74:80:b2:4d:91:de:
                    b7:aa:d4:a7:99:0e:fd:c9:25:f3:d9:04:7d:e4:fd:
                    59:cb:1c:6f:e2:bc:5a:1e:fc:08:a8:7c:37:40:ea:
                    43:cf:f8:30:66:f9:ab:8d:46:90:3f:0b:30:a9:b4:
                    2b:93:e0:85:90:de:6b:fc:72:07:6c:60:0b:c5:3a:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:3E:C2:3C:86:F3:15:28:9D:12:81:67:D1:2E:6C:D7:8F:E2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f54446b-efb5-3d49-a7d8-ebdf7cf8b37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:01:df:98:ba:d9:68:0b:f3:a7:e2:c3:66:f1:80:63:4f:0e:
         6e:11:22:e2:40:e2:1d:c3:0b:c8:2c:57:f4:14:34:e6:30:03:
         a5:5c:a5:b5:f6:e6:2d:47:62:31:e5:03:f5:2c:01:7d:74:61:
         ff:aa:72:17:04:86:fe:16:6a:72:6c:81:a2:ff:9e:44:17:01:
         eb:39:39:45:1f:63:a4:a0:bf:62:0e:b0:69:5e:0d:c5:0c:46:
         1d:de:ed:93:e4:a4:6b:1f:3b:ce:57:f3:8c:7e:a6:f0:5c:10:
         71:0a:a2:24:0f:71:1d:aa:4a:fa:8d:58:b7:7d:d9:3f:9c:48:
         a6:0d:71:36:eb:37:f3:77:03:1d:05:f1:03:4a:a9:5c:34:5d:
         b1:0c:51:eb:0c:31:7b:0d:c6:fa:fb:41:c3:fa:80:e5:f6:51:
         05:db:08:b4:25:b7:d6:8c:42:71:6e:fe:65:da:a5:c5:34:00:
         d9:c4:94:4a:e3:df:4b:47:69:fc:04:11:72:8d:d2:21:36:ff:
         5b:dc:18:98:d8:6e:0d:f5:32:e2:7e:f6:20:e5:89:43:22:00:
         da:08:e1:a8:ec:d3:7f:6b:08:e2:51:97:30:d9:8b:f4:a6:44:
         9f:40:fb:f6:45:e2:24:31:a7:c4:c8:12:cf:54:28:4e:c2:96:
         5a:6a:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:16 2025 by rpki-client