Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e803c164-9f0a-3aa4-8cdf-bc9713875d18.roa
File:                     e803c164-9f0a-3aa4-8cdf-bc9713875d18.roa (raw, json)
Hash identifier:          rDKLuyEI1GGJF4munhzvVkkO0Fz1Da4zEpWlDi2N1bE=
Subject key identifier:   19:7D:6E:C7:A3:48:46:0C:C6:DD:43:3F:05:55:FD:C0:E1:2A:CB:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB6995DAD0EF7DAAC44400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e803c164-9f0a-3aa4-8cdf-bc9713875d18.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397230
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:69:95:da:d0:ef:7d:aa:c4:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=d563e451-4489-4b6c-ab2b-4b865a8df9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:0d:7e:52:3b:41:43:b7:cf:04:97:f9:c7:
                    fd:f3:6f:d8:9e:70:7a:e6:cd:55:0d:9a:30:5f:5d:
                    5e:df:bf:04:77:7c:bd:8d:04:c8:5c:6b:bb:f3:90:
                    a3:a7:5d:de:9c:69:e5:64:7c:6b:59:75:93:c6:ba:
                    99:59:0e:1a:30:ad:72:a0:a5:09:83:31:c0:2c:ad:
                    c9:68:09:4e:37:aa:6d:7b:28:e6:00:5f:40:33:a7:
                    07:60:e0:c2:47:81:91:0c:22:05:95:68:57:4f:a8:
                    82:73:9f:38:d9:a9:73:00:5f:ee:4b:98:15:6f:f7:
                    09:dc:16:52:82:82:e7:62:9a:03:d0:25:dd:b9:6f:
                    00:ee:ff:9f:9f:46:7c:a3:ed:5c:00:76:fa:96:78:
                    f0:7f:5a:e8:45:85:c5:e9:8a:31:bd:b7:74:fd:55:
                    69:af:40:8d:47:d5:22:56:e0:2a:a9:57:ed:75:9d:
                    cb:3e:13:8e:4a:59:df:d9:2d:74:fa:58:e7:78:c1:
                    c5:ab:39:18:87:64:a4:6d:d0:63:93:72:ee:9f:f7:
                    79:4e:1b:75:ea:b4:ea:e4:34:b0:45:c3:e6:3c:3a:
                    39:2f:ee:97:18:da:ff:1b:f9:3b:2a:4e:b6:8c:70:
                    f4:6e:27:9b:7b:8f:88:5b:7d:90:8e:29:d3:f5:90:
                    4b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:6E:C7:A3:48:46:0C:C6:DD:43:3F:05:55:FD:C0:E1:2A:CB:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e803c164-9f0a-3aa4-8cdf-bc9713875d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:a4:56:a8:f4:1d:d1:f7:fc:34:b5:a9:a5:97:10:88:bf:
         bc:df:0c:94:2f:f6:81:87:47:30:04:0c:26:6a:d8:83:32:97:
         e9:ed:88:bd:c4:00:84:fe:0d:4c:bb:81:f2:7e:1a:cf:2d:d5:
         85:62:eb:88:af:db:76:7d:44:02:56:f5:d4:fd:e3:b6:f2:79:
         fb:2f:b5:20:a4:b2:cc:42:52:65:61:92:0a:ff:10:0e:2f:09:
         65:b9:64:27:2c:6e:1d:6a:8f:01:cc:27:f7:61:5f:c1:5d:1d:
         d9:85:88:10:d8:e3:71:43:9c:51:1d:f5:5f:aa:6d:27:80:a9:
         8f:6b:a8:96:e9:46:28:32:0c:5d:e9:a9:5e:76:1d:2c:be:02:
         5b:d6:af:1e:eb:fc:ad:b4:f4:a3:63:ab:d4:13:5a:1b:1c:10:
         ee:b1:5c:5e:d1:57:1a:97:92:b7:01:f8:66:ef:87:be:c1:e6:
         54:76:e3:5f:df:1b:5e:0e:24:95:6c:54:ce:32:61:70:0f:41:
         10:fc:8b:21:23:de:8d:32:81:14:79:d2:b2:2f:a5:37:2d:d0:
         4b:63:aa:9c:f0:5d:7d:3b:03:ae:a8:2f:29:ad:71:0b:e3:6e:
         4e:8d:86:79:86:52:45:b4:84:bb:88:b8:30:76:03:09:c1:0d:
         a0:14:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:30 2025 by rpki-client