Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00a71c6-7bc6-3d1e-926b-755ad95b0e2a.roa
File:                     e00a71c6-7bc6-3d1e-926b-755ad95b0e2a.roa (raw, json)
Hash identifier:          w1LMaEZ1sj9wYrV3jQkoOylAvEivDu5b7olxjkk666U=
Subject key identifier:   C6:74:A7:5F:8E:53:1B:E0:B3:CA:9E:B2:67:53:38:9C:B7:5E:7C:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487CEB32CB0113FF122E605B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00a71c6-7bc6-3d1e-926b-755ad95b0e2a.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     63949
IP address blocks:        143.42.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:32:cb:01:13:ff:12:2e:60:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=c853509f-fa91-4168-8211-dad652f4f979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:20:90:bc:c0:46:f3:a1:eb:0f:b2:d5:d4:
                    ce:15:ef:99:c4:a6:3f:b6:dc:52:96:cc:bb:83:cd:
                    1b:cb:25:32:ad:11:1a:04:91:23:6c:6d:20:7c:6b:
                    dd:b8:19:08:c0:8d:9e:6b:af:02:2d:ce:68:86:10:
                    09:57:22:7b:e0:b5:ce:70:db:b8:05:a7:32:ef:aa:
                    6b:f9:5c:5d:d2:63:f2:61:65:54:f1:82:3b:7f:c1:
                    6f:4d:99:02:8b:f0:85:e8:be:cd:9b:fd:d5:0e:6f:
                    98:fa:c5:de:1d:68:fc:21:ac:bf:52:8c:a0:fe:2c:
                    4b:36:79:a7:23:90:84:86:ff:53:e4:6d:c1:ff:01:
                    0a:92:75:a4:3e:12:c1:40:da:a2:2a:55:9d:76:2a:
                    8f:8e:ad:af:8a:ae:b3:2d:47:98:b2:b3:db:0d:93:
                    59:70:98:5a:34:46:0f:c4:34:49:53:5f:ac:d7:1f:
                    de:32:c3:29:96:6b:b1:da:fc:1d:3c:59:bf:eb:99:
                    9e:c3:13:59:1f:22:e9:21:07:09:4e:83:dc:fe:56:
                    93:76:76:34:10:8c:6a:f6:df:c5:46:24:a4:3e:70:
                    32:4f:79:0f:da:28:4e:d7:b1:ef:5a:a7:ab:0d:17:
                    42:60:4a:a1:2c:e9:6a:55:55:39:f0:ba:0d:2d:a7:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:A7:5F:8E:53:1B:E0:B3:CA:9E:B2:67:53:38:9C:B7:5E:7C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00a71c6-7bc6-3d1e-926b-755ad95b0e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.42.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0f:cd:73:df:5c:c3:68:02:74:dc:5c:ab:76:8a:f4:d2:40:
         9a:87:7f:ba:73:96:7e:38:12:25:d1:ea:37:74:1c:dc:6a:9d:
         5c:de:ac:df:bb:0f:1b:3a:73:92:9b:ce:af:da:e1:42:aa:80:
         ae:1d:b1:6f:14:2f:c5:e0:e8:87:3a:09:d5:50:4d:64:24:43:
         8a:b5:24:53:f7:51:5a:8c:13:25:7c:0c:8e:19:b7:70:6b:af:
         26:c0:f7:67:6e:52:df:65:13:da:a3:0d:b5:21:e9:83:02:10:
         12:2c:49:e8:ea:3f:1e:0b:dc:3a:d3:dd:f8:9f:99:64:bb:ba:
         3f:34:7d:7a:b2:26:5f:fd:08:61:65:97:51:38:a5:eb:55:3b:
         69:00:ea:0e:76:b4:3e:6d:c8:50:ec:a3:bb:70:62:4e:b7:59:
         44:ad:69:cd:eb:42:fe:95:78:0f:f9:3a:15:7c:bf:3c:99:7c:
         9c:44:40:d8:4b:4a:9e:b4:47:87:d3:2e:a4:64:4b:50:cd:89:
         f8:1b:cf:84:41:9b:ae:bc:43:3e:bd:98:af:14:33:1f:89:7a:
         94:07:dd:4b:9f:82:a2:71:7b:44:5f:71:e1:1c:47:da:ce:40:
         21:d7:22:97:7b:d0:45:47:41:2f:5b:49:11:ea:9f:ee:eb:d6:
         a8:6f:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:00 2025 by rpki-client