Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa
File:                     337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json)
Hash identifier:          GfmXtUj/r7gk3UDVI4gF2WlDh2fgiIi5jBuKeiIyz3g=
Subject key identifier:   81:B5:FE:1C:4F:3E:8A:D3:18:74:E1:75:31:B4:82:DD:96:47:87:D5
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F43285848100A7AE9E34EFDB1CAD85600
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     14630
IP address blocks:        199.230.0.0/21 maxlen: 24
                          199.230.8.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:7a:e9:e3:4e:fd:b1:ca:d8:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=1d3ceb15-4c07-49fd-8163-113af2839601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:0b:7e:c1:ed:8b:1d:63:59:83:4b:4b:d1:
                    e0:a3:53:cb:9f:eb:a0:cc:26:9b:97:4e:63:74:d3:
                    cf:dd:22:78:c9:fb:4c:c1:e5:35:db:6d:0f:99:15:
                    91:eb:89:11:e0:1f:fa:f2:cd:0e:d6:ca:5e:5f:c2:
                    ce:19:b4:ee:9e:9c:6c:ae:16:11:8c:dd:1e:08:24:
                    15:9f:a4:cd:b0:e4:36:d3:5a:f9:e0:4d:67:96:02:
                    fe:87:f2:11:fd:96:0f:24:7d:c4:2c:2a:aa:3b:15:
                    7f:a2:4c:63:9b:e5:d4:f8:7a:65:09:19:27:eb:ee:
                    c9:5c:2a:46:01:cb:96:aa:71:a0:83:77:71:d0:94:
                    3e:7b:9e:fa:91:60:eb:e0:ec:3e:23:78:d9:6f:eb:
                    f9:9b:fb:85:4f:b0:a3:b3:19:14:54:f4:ab:00:1e:
                    00:61:83:32:56:7d:f9:27:5f:be:df:19:34:5b:e0:
                    8f:98:40:21:99:b8:a8:7f:99:68:23:c3:b4:a4:bc:
                    41:99:7b:86:49:3c:b4:34:f4:b6:e4:d4:88:23:de:
                    3c:d4:7c:1c:84:59:21:4a:26:7e:a1:8f:61:d5:c2:
                    2e:b1:e5:ed:36:8f:02:89:f9:ae:02:ae:73:ee:21:
                    a5:9e:15:4b:79:29:e6:82:58:0c:ef:42:e5:67:fd:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:FE:1C:4F:3E:8A:D3:18:74:E1:75:31:B4:82:DD:96:47:87:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.0.0-199.230.9.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:40:73:d1:39:09:bd:80:30:e6:df:0e:1c:9e:75:95:b5:
         d1:12:88:c1:ca:8c:fd:6b:2b:78:71:73:d3:9c:b3:c9:5d:b1:
         58:06:93:77:d8:cb:19:df:01:77:ad:02:ef:32:c1:b5:6f:2e:
         de:93:4a:e6:22:2d:89:42:0c:22:84:69:df:c3:3c:5b:82:b0:
         54:83:b9:35:fd:d9:6e:7b:74:34:e1:ab:6c:aa:b8:32:bf:ea:
         6c:c7:6a:f8:ec:b3:6c:be:31:1f:22:fd:8f:ba:19:2d:8b:d7:
         5e:49:21:b4:56:ff:81:93:fa:68:ac:32:86:9b:16:90:44:72:
         8c:f3:63:83:11:a4:08:c1:fd:5b:66:ac:fe:9b:04:53:cc:3a:
         87:18:76:f3:d7:83:24:a7:d7:ba:94:c7:c8:a8:70:c6:62:d3:
         d7:f0:a4:8c:84:22:67:fa:ba:57:0c:7b:1f:11:ec:0f:58:7d:
         9d:17:1c:5e:f4:55:f5:80:a5:14:51:3c:90:f1:50:4c:29:21:
         36:78:48:9a:fe:65:d4:3c:f8:63:46:b5:c3:5a:dc:2b:ec:f8:
         94:23:9a:be:ce:d1:e5:78:84:09:ab:6d:f4:94:f2:9f:38:da:
         2f:b9:11:33:47:0e:a4:0f:85:f8:c9:be:75:69:11:a2:a1:40:
         14:99:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:03:17 2025 by rpki-client