Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
File:                     fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json)
Hash identifier:          Yae3WNyVWo7J2dGYkB1gziTmXF+s4RrE7eCOxnhcfYA=
Subject key identifier:   6C:42:40:C1:D3:C0:13:7A:5F:E7:75:1F:2B:58:A3:78:7A:99:15:BE
Certificate issuer:       /CN=4d6573b2-9f3e-43b9-a710-eaee606df226
Certificate serial:       010D0C9F432858487325A37953169E9C2ED2DA00
Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     3128
IP address blocks:        143.200.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:a3:79:53:16:9e:9c:2e:d2:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=67f83669-1c34-4b21-b148-6d44e1329d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:39:f1:28:09:fe:a2:be:51:75:57:ca:13:
                    19:e9:6e:8d:dc:0d:8c:9d:b9:6f:5d:95:66:15:dc:
                    05:3f:00:cb:7d:dc:41:ef:57:e3:87:58:67:d2:a3:
                    80:02:27:b0:c3:d8:7e:87:e5:57:a7:77:b3:6e:d9:
                    4c:bd:90:b3:6e:9d:bd:c9:ce:69:7a:04:2d:63:67:
                    86:45:48:69:51:a4:80:0b:bd:b9:6c:ac:ab:53:79:
                    f3:85:36:a6:35:d4:53:f8:42:98:9c:cc:45:f5:c4:
                    ea:e8:85:a8:91:af:61:31:35:0f:ae:e6:04:a8:6f:
                    98:5c:93:00:13:ff:43:4c:45:45:26:06:cd:df:b6:
                    eb:4d:79:17:e5:81:54:67:bb:c6:fc:f9:2a:c3:4a:
                    66:23:b2:c5:7b:55:6c:a6:b2:87:1f:0c:45:ca:79:
                    37:ee:b5:07:22:2d:89:73:9e:a4:e6:f5:d4:65:40:
                    b4:8b:a2:1e:e9:43:79:9b:c9:2d:f7:ac:ea:02:5d:
                    09:cc:84:37:78:a9:f0:3c:d4:79:c0:6c:96:f8:36:
                    f1:21:82:3f:ce:1a:a3:89:5e:99:fa:3e:cb:d7:27:
                    03:c5:8f:e8:a4:4f:06:eb:9d:23:9e:8a:2f:54:ad:
                    6e:04:b9:68:f0:13:58:4b:77:51:1b:62:ef:47:8f:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:40:C1:D3:C0:13:7A:5F:E7:75:1F:2B:58:A3:78:7A:99:15:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl

            X509v3 Authority Key Identifier:
                keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:db:80:88:80:b7:d2:5c:20:27:cd:1b:60:f6:48:69:30:41:
         bd:b6:7c:90:4c:4a:25:20:1b:72:da:f9:7b:e3:66:13:41:f0:
         2f:fd:a7:84:46:95:f0:5e:17:07:d3:d0:5c:e0:bf:36:20:27:
         4e:ac:db:4c:eb:aa:05:f5:de:ea:dd:81:21:e4:70:44:8b:e7:
         69:ef:19:a5:72:48:62:cc:ed:16:a6:e6:cc:e1:c9:fe:9d:e7:
         e4:08:22:64:56:f2:cd:78:6a:2c:c7:43:5c:5c:11:a1:3b:74:
         f3:49:3d:6b:36:3a:7b:9d:ba:11:bc:67:19:11:c9:0a:85:66:
         e7:65:57:27:3e:69:d9:d2:39:6c:c7:9d:89:34:d7:95:b9:78:
         9f:2c:cc:82:80:a7:a7:70:4f:42:dc:a6:de:19:09:1c:19:4e:
         94:3e:cf:36:4b:5b:82:9d:ec:9e:0b:7c:73:36:5e:87:2f:ae:
         b5:50:48:43:84:20:df:14:f1:61:e7:3e:dd:3b:4a:3f:53:40:
         b4:ba:6d:32:0e:d2:8f:86:29:c3:de:8a:73:58:41:ba:fe:2d:
         52:a1:97:22:7c:b1:03:5c:8f:66:01:29:aa:91:05:00:7c:8c:
         00:b8:26:22:f2:31:3a:3d:a2:bd:a0:d0:f8:96:68:bd:07:f1:
         ec:dd:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:59 2025 by rpki-client