Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa
File:                     dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa (raw, json)
Hash identifier:          wsbNaTWyjV/TerDhgod6SuBnaNrOrLU6PVVpdFbmnNU=
Subject key identifier:   D4:C6:37:8B:91:47:A6:9A:6C:0B:E8:E2:C8:DC:6E:C2:7E:35:28:92
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858481FDE678B3A0DDB0171FFB780
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa
Signing time:             Sat 07 Dec 2024 06:05:04 +0000
ROA not before:           Sat 07 Dec 2024 06:05:04 +0000
ROA not after:            Fri 07 Mar 2025 06:05:04 +0000
asID:                     13445
IP address blocks:        216.151.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:de:67:8b:3a:0d:db:01:71:ff:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Dec  7 06:05:04 2024 GMT
            Not After : Mar  7 06:05:04 2025 GMT
        Subject: CN=a5689932-30a8-4172-b8a1-f73dabbbdd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:d8:bf:73:85:f2:e9:b0:b8:4d:dd:2b:71:
                    ce:55:5d:53:af:22:2b:f2:c8:7f:f7:e1:5c:12:4d:
                    41:b4:a3:69:f4:83:6d:99:7d:cf:67:76:30:be:39:
                    df:e5:1c:6c:0d:fd:3c:23:37:82:63:4b:04:b8:94:
                    fa:c0:16:cd:54:a6:d0:ce:b4:30:92:1c:c5:fb:53:
                    98:e6:63:2d:2b:e8:4e:4b:5f:5d:21:69:70:54:37:
                    d2:b0:f8:48:18:74:3d:99:ac:5c:81:e6:a3:b9:82:
                    91:af:cb:9b:3b:fb:7c:0f:dd:fa:db:17:01:0e:10:
                    2d:d3:75:ab:39:8a:e0:8a:ed:be:f0:7d:bb:25:42:
                    35:96:2c:89:ae:35:52:f2:64:b3:ec:82:b2:55:ae:
                    44:87:94:c1:61:cc:8f:d3:40:82:21:1a:17:e6:7a:
                    aa:c7:cc:fb:4c:1b:c0:49:8b:0d:ef:30:b5:9f:8b:
                    dc:59:14:4a:1e:39:92:07:51:80:39:b3:44:a6:00:
                    09:c1:36:8f:fb:68:06:82:7c:30:4f:b1:b9:55:45:
                    71:79:9b:0f:08:2b:92:1b:74:d6:24:8d:b8:68:a3:
                    7c:f6:f4:ba:74:73:25:3c:d4:b8:40:c5:53:d9:c3:
                    14:63:25:ca:4f:cd:de:9f:a8:5c:1b:84:40:5f:87:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:37:8B:91:47:A6:9A:6C:0B:E8:E2:C8:DC:6E:C2:7E:35:28:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:88:ea:2b:55:ea:ee:1f:43:6d:47:3e:6a:25:57:32:04:
         ee:21:96:b6:ec:f8:8a:5f:16:bb:ac:17:5d:2a:ca:cc:1b:63:
         d7:89:e7:ca:1d:3c:2a:b7:b2:77:d3:24:32:61:46:ca:3d:22:
         dd:b6:e6:0d:26:cb:fb:f5:3a:bc:81:77:b0:3a:26:17:9a:5a:
         6d:15:b2:f1:0e:8e:23:bd:aa:e6:0e:db:7c:e8:4d:e9:b0:a1:
         81:0d:c6:0a:a8:91:6d:99:2d:5b:b7:e5:2a:9d:a1:8b:d2:67:
         9a:b2:c5:cc:38:5f:bc:22:02:08:8a:41:a7:16:d7:10:b2:03:
         c7:cd:a9:dc:ce:c8:3b:bf:42:a9:2b:81:62:9e:e3:87:83:c5:
         fd:fc:e2:b5:63:5e:1b:c5:90:76:e8:d2:91:b9:6d:9e:ac:d4:
         d8:96:20:bf:23:3d:94:c4:9e:9f:87:e7:e1:d8:98:25:58:98:
         5c:f8:06:37:ff:4b:e3:12:aa:53:ae:38:77:86:54:ce:0c:15:
         9c:56:80:1b:ba:8b:fa:c2:c2:96:e4:f8:27:31:12:1c:50:a7:
         f4:28:b3:0b:0f:3b:79:ed:c1:47:33:30:14:2c:da:4a:65:8c:
         5e:9d:15:8e:b0:d4:c9:0c:6f:37:12:37:e4:9c:63:5e:1c:f0:
         37:9d:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:48 2025 by rpki-client