Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa
File:                     1f5d381b-3297-3625-9090-3ffaaaff089b.roa (raw, json)
Hash identifier:          Q4TtiugCVHqtKIArRdq/aG0fX7/J4uPb2+Itf3fYSjE=
Subject key identifier:   A2:89:BE:86:52:B8:2A:F6:12:E9:5F:C6:D8:7C:7D:32:17:F3:49:04
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F432858487325A9036DEA0A2DEB3B52C0
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     2153
IP address blocks:        137.164.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:a9:03:6d:ea:0a:2d:eb:3b:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=79131794-6222-47a1-9b01-d00bb62263a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:60:62:99:ba:dd:46:4e:4a:b0:7b:06:d1:
                    ea:be:54:88:5c:c8:fa:05:c1:65:08:e9:d0:85:70:
                    bf:78:29:fe:eb:24:b6:ee:99:b8:fa:c1:6a:ba:32:
                    3f:f6:6a:5e:34:19:51:a3:a6:50:72:6f:fa:5c:b9:
                    8e:d1:bd:e5:90:75:d7:24:e1:14:32:72:8c:2a:1f:
                    aa:ff:55:5c:7e:32:50:90:01:f4:71:3c:e5:9a:dc:
                    fc:b8:22:d5:54:b4:fc:41:e0:c5:d2:cd:97:88:44:
                    ff:a8:4e:5c:01:12:ca:64:31:53:f1:1e:db:34:78:
                    df:e2:c3:97:90:22:98:58:e5:4e:fc:ee:1f:2d:ba:
                    6f:d3:20:3e:49:24:a7:dc:d9:94:64:0d:e8:e8:eb:
                    62:a5:c6:b4:58:6f:58:85:20:41:f0:7c:b8:80:3e:
                    65:96:7b:d3:d5:3c:fd:42:97:09:1e:a4:6b:d5:37:
                    f2:70:4b:ff:2c:24:e6:7e:9a:9e:3e:f8:05:66:d1:
                    5b:ab:a4:19:d8:df:c5:e9:1a:a3:97:a4:ff:ac:48:
                    6a:24:28:5e:7e:b6:78:4c:3d:ad:eb:8f:4d:d4:38:
                    79:5d:ca:3e:cd:f0:18:c7:76:f9:5f:52:04:5f:b0:
                    b3:12:d4:e2:f0:28:56:a2:e7:ed:39:ea:40:88:37:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:BE:86:52:B8:2A:F6:12:E9:5F:C6:D8:7C:7D:32:17:F3:49:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/1f5d381b-3297-3625-9090-3ffaaaff089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:2b:9d:5d:99:5a:9a:49:08:cb:73:64:12:cf:cc:04:3f:
         fc:94:e9:eb:9d:d8:ec:8a:5f:34:fe:e6:1e:de:9f:3a:05:06:
         e1:f6:37:c4:83:05:4d:f6:c2:e6:a6:de:76:2a:65:5b:c3:94:
         75:a6:be:48:b1:af:06:82:b6:ad:b1:d4:ea:6f:70:b5:a5:08:
         37:68:03:db:b7:5d:67:1e:26:c7:57:b2:eb:6e:a8:f6:79:69:
         ff:95:7d:df:ea:9d:45:7d:d7:9f:e1:8a:4f:44:84:73:5d:ce:
         30:49:e3:97:a9:cd:1c:cd:9e:a9:41:be:45:d5:69:c3:a2:fd:
         e5:06:c4:ad:91:67:da:a2:a5:ed:ba:1a:94:ff:74:2a:8b:fe:
         b8:f9:90:e8:86:bf:8b:3b:52:d0:47:03:48:41:57:5d:58:87:
         8b:87:8e:95:f8:1f:e3:60:d0:20:0e:79:13:8a:f5:6a:70:70:
         bf:07:7e:64:34:0a:ca:b1:7d:7c:2a:93:ae:95:af:5e:07:89:
         b4:a2:a9:67:d7:44:75:8b:d3:26:f3:8e:65:52:e6:bb:b9:f5:
         d6:93:8d:e1:1f:c7:d8:8b:58:f5:75:c0:7e:5f:22:e5:4b:a1:
         93:f7:07:53:dc:13:44:82:3b:f5:c0:66:77:40:fe:e4:3f:75:
         b5:3d:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:20 2025 by rpki-client