Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa
File:                     68265e2e-e1c8-388b-8fc0-d6401745c121.roa (raw, json)
Hash identifier:          pU7xzYthqJef8C24+2jX7gcc79kc/dhvLmJvfaJAMJU=
Subject key identifier:   C0:5B:18:E6:9F:8A:B2:3B:56:11:2E:E6:E9:96:A8:D7:8B:E5:27:CC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62AB3463E48D7E5CB371580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        142.251.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b3:46:3e:48:d7:e5:cb:37:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c839bb9f-f293-434e-a4de-9d163fa66b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:a1:96:a4:8e:da:33:05:1b:fd:0c:0e:c3:
                    78:88:54:23:26:7d:0a:20:55:9c:9c:d3:1e:c2:3e:
                    f7:76:2a:82:b0:11:94:49:91:cd:7c:1e:4e:f6:b9:
                    3f:14:ac:a6:0a:b7:e6:42:cd:99:a9:6c:fc:e4:c8:
                    05:1b:24:74:13:be:18:58:64:5a:aa:62:df:a7:84:
                    c5:8b:8d:18:66:da:99:69:63:ec:5b:4e:eb:db:eb:
                    67:c9:bb:ff:80:74:ae:73:e4:e4:81:9f:5b:25:b8:
                    7f:3c:70:f5:0c:d0:d2:e8:44:ed:c5:b7:36:b1:17:
                    2e:24:5e:09:b7:14:38:55:89:df:5d:cd:85:2a:59:
                    31:b5:54:e7:93:b0:d3:2d:6e:cb:25:7c:55:74:7b:
                    47:1f:0e:7b:e9:cb:21:45:0b:ad:37:5d:f2:a9:de:
                    ac:44:28:26:59:a7:fd:a0:13:26:a9:5f:c9:32:7b:
                    88:2c:7b:7d:2e:d4:23:7c:a1:0b:bd:f9:cf:0f:8d:
                    45:de:0c:fd:a6:eb:d2:0c:08:4c:01:aa:57:51:01:
                    b6:63:cc:92:cd:d5:9f:7d:12:11:f6:10:68:93:b5:
                    69:ee:24:23:45:77:7f:43:2c:69:cf:d4:5c:d6:c3:
                    b3:24:0c:16:2a:47:8f:93:d5:c1:76:ac:b7:44:96:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5B:18:E6:9F:8A:B2:3B:56:11:2E:E6:E9:96:A8:D7:8B:E5:27:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:06:e3:f6:3b:3d:b8:f6:d6:0d:6f:9b:a6:b8:ee:6c:c0:66:
         0b:30:2f:19:c3:46:ba:1a:94:39:f8:f0:e5:8a:b4:84:14:e2:
         f8:e0:9f:6d:a9:ab:45:a6:4b:b7:82:35:dd:ce:17:e8:9f:2c:
         86:49:74:3d:88:fc:7a:b4:35:b6:dd:b5:64:c1:36:96:d0:da:
         77:ce:87:e4:5d:28:3b:be:75:e1:28:22:55:12:21:c2:c0:f3:
         c4:a7:9e:b3:c5:86:32:fa:e6:a7:f1:2d:cb:a9:d8:08:ba:ec:
         10:3c:e6:08:f1:70:3f:ad:47:6f:e1:46:a1:de:34:6c:f6:06:
         08:ef:9e:3e:c5:e4:ae:99:97:af:de:3c:ba:80:7a:67:7b:26:
         85:d7:65:56:a4:d8:c5:af:ca:f7:f3:8f:06:26:8f:ce:ca:bf:
         fc:02:19:7b:43:35:88:43:9d:9e:9a:97:7a:e2:37:8a:de:4f:
         ca:08:d1:64:c8:f3:06:46:77:6d:b5:17:46:cd:47:80:ed:96:
         a0:c8:d8:8a:2c:07:72:64:51:dd:95:c4:bd:95:0f:a0:a2:1a:
         93:c8:85:b1:ba:e8:9e:e3:3a:6c:ac:01:95:55:77:4a:c6:56:
         7e:af:4c:46:6b:75:e8:6d:8e:36:af:dd:b9:13:4d:67:10:42:
         f6:00:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:51:59 2025 by rpki-client