Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa
File:                     47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa (raw, json)
Hash identifier:          n3v1l915bF4Svp4igaRcQiFkIdJRuSfc5cC5ml3NU0A=
Subject key identifier:   F7:D0:4D:D7:74:98:60:E0:88:E5:E9:C4:8A:F4:7D:88:7C:7E:58:7C
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F432858488280840FEED56E2CD555E2C0
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     40703
IP address blocks:        157.166.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:84:0f:ee:d5:6e:2c:d5:55:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=93e602aa-5165-4c01-983c-b55b514de9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:94:68:ea:2a:4c:fe:74:9b:44:94:95:87:
                    c6:f3:bc:02:8d:5a:05:64:8d:1e:04:0d:46:03:b1:
                    66:ff:aa:d7:b8:87:50:c1:24:e2:74:af:a5:6e:0d:
                    b2:40:d8:62:e9:8d:ef:71:a7:20:e1:a4:77:5c:7b:
                    2f:a2:18:72:27:16:cd:d8:6b:8f:fd:95:fb:34:25:
                    2f:22:40:59:97:9e:78:57:40:76:4e:bf:fd:d2:de:
                    f2:e8:06:59:31:03:90:48:14:73:89:64:48:85:b0:
                    c5:d3:50:cf:19:f0:cf:0b:20:5a:20:74:65:d1:4d:
                    68:91:8b:a7:69:88:52:36:73:61:77:cb:c9:a5:9d:
                    8b:41:a1:ae:74:79:22:b0:45:f2:51:b0:9f:72:89:
                    00:82:6e:89:8f:af:e5:3f:98:d2:c8:e7:60:ae:43:
                    64:02:de:1e:8d:a5:d9:8a:f2:89:b5:ee:38:aa:4b:
                    b0:46:24:cd:2e:5e:36:28:b4:2c:8e:fa:e2:c5:39:
                    59:0f:5a:51:de:07:8c:95:62:cc:62:5b:97:2b:0e:
                    97:c4:b5:f3:8d:3c:17:68:84:a8:21:3e:4f:1e:b3:
                    ad:5c:5c:e4:f5:ef:84:bc:21:6a:af:81:19:4f:65:
                    90:e7:19:81:a9:7a:cb:b3:c4:82:ba:05:a2:ac:c0:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:4D:D7:74:98:60:E0:88:E5:E9:C4:8A:F4:7D:88:7C:7E:58:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:0c:1e:e3:af:0f:90:f4:42:69:e6:fc:78:83:4b:a1:3b:
         d7:b7:98:42:12:ed:ed:ba:1c:84:a9:f9:e5:f7:4f:19:27:f1:
         06:c4:37:60:49:6a:f6:b6:cb:09:b6:6c:23:c6:ad:5e:2e:cc:
         87:48:77:c5:66:39:35:3d:af:93:79:75:4f:82:b2:52:b3:01:
         dd:1e:87:a0:0b:64:60:60:f0:12:19:a2:3d:fb:3d:fb:23:1c:
         7e:0e:81:16:e3:53:6f:f6:a5:f5:9b:03:20:7c:0b:42:6f:c4:
         2c:b1:1f:b1:ab:3b:6e:6d:4a:99:dc:c5:e6:c4:31:c7:cb:bd:
         09:1c:66:13:bb:f7:31:ef:6e:01:51:85:41:35:cc:cc:d0:aa:
         09:f4:e8:b8:66:83:ad:49:93:ab:75:e5:da:d7:d2:03:77:62:
         92:d1:18:98:e1:45:97:13:e7:b8:4d:fa:85:9f:68:1f:66:19:
         63:80:bf:96:e1:01:29:d3:6e:7d:1d:ba:76:8d:c2:50:fe:21:
         e2:e5:0f:ef:8e:1f:58:21:08:f8:30:9d:6f:e6:04:a3:ad:5a:
         d4:92:2d:03:36:48:67:33:75:2d:9e:7e:8b:c0:5f:17:22:c2:
         fe:df:40:b5:9d:96:ed:ea:ab:a7:ca:d2:3c:6b:02:1b:ee:56:
         5c:8f:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:04:30 2025 by rpki-client