Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
File:                     3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa (raw, json)
Hash identifier:          43PxgA+w5uRqyT2u7pW3iFRaFgxcrfp9l8Oqryj87OA=
Subject key identifier:   1A:BA:AB:D4:A2:74:A2:E5:AF:99:AA:97:AE:E1:00:D9:B1:57:36:66
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F432858484C102FEB1E03C2DA4EFE2580
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     13713
IP address blocks:        144.49.60.0/24 maxlen: 24
                          144.49.61.0/24 maxlen: 24
                          144.49.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:2f:eb:1e:03:c2:da:4e:fe:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c51797ed-3a95-4912-9ba1-46be25c4dbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:92:96:79:ce:69:34:63:ff:24:8b:c2:1e:
                    06:fc:f4:08:3d:8f:4f:3e:a4:13:67:89:ff:94:61:
                    27:1e:7c:5e:b3:39:e2:ea:33:f2:f1:9a:6e:43:c4:
                    9f:51:2b:3a:da:e8:dd:15:51:35:d8:92:e5:b9:5f:
                    79:44:66:43:6c:71:22:eb:9f:50:81:19:9b:9a:07:
                    61:ff:ca:14:70:c1:5a:9a:43:7d:e6:b9:f0:ec:e5:
                    2f:b9:2a:80:68:be:cf:e5:1f:c7:46:d7:af:74:27:
                    58:a5:54:70:8c:01:f6:09:4c:34:45:ed:ce:38:90:
                    25:9b:5f:38:80:65:15:94:3a:49:46:88:0d:c8:7a:
                    2d:09:e7:8c:ca:f6:46:99:c3:93:8d:d7:24:37:10:
                    4e:81:1a:5e:96:23:76:9b:0f:35:fd:e2:07:30:47:
                    2a:4e:0b:4c:58:6e:4f:86:7f:02:63:98:59:a3:09:
                    54:a6:fc:20:dd:a1:80:ee:b0:88:e6:f0:10:d6:ed:
                    71:92:e8:b6:40:b8:10:93:60:c4:e0:5f:5a:80:c6:
                    e3:e4:98:bc:0f:bc:04:65:b4:5e:c8:46:89:bc:08:
                    e4:3f:5e:3f:a7:4f:c9:dc:07:02:2a:ee:56:27:00:
                    ab:d9:13:3c:ff:a0:ad:ca:a1:de:e2:1d:88:7e:6e:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:AB:D4:A2:74:A2:E5:AF:99:AA:97:AE:E1:00:D9:B1:57:36:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.60.0-144.49.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:dc:1b:50:cf:8c:15:61:a5:f0:ad:04:17:f5:59:71:dc:
         8f:53:c4:87:24:6f:12:2d:1a:18:ac:3c:4b:f6:e3:d1:ae:91:
         d3:cd:d5:e6:3a:60:ca:d7:28:3e:e3:84:92:9e:4d:ed:67:21:
         ab:f1:3e:c9:2c:6b:c5:0d:1e:2a:a7:9c:4e:90:fb:58:4b:43:
         e2:bd:e8:c6:19:6f:95:ff:7c:8c:e8:0b:28:cc:1e:00:d1:94:
         d3:08:99:7f:7c:31:fc:45:c9:c2:39:26:da:42:7f:13:b9:a7:
         67:46:38:84:44:29:c7:e8:d8:9b:23:6f:39:9a:df:b5:a2:ef:
         1b:bf:8f:88:35:5c:e8:de:aa:f0:a2:32:94:13:c1:30:8c:54:
         7c:e3:04:3b:34:c4:c5:5d:40:30:22:69:d4:e8:25:b6:a8:4e:
         2c:10:8f:1b:48:72:49:fc:a5:ba:14:84:07:57:6d:bb:10:fd:
         da:2e:8e:8a:88:2d:d2:71:b7:ff:54:17:2d:2f:88:7b:41:e0:
         60:a6:65:da:ca:4e:fc:4b:8a:30:b8:a4:c6:57:be:cf:9d:81:
         de:48:b8:97:e3:ee:5b:8f:c0:da:e1:50:7d:1d:07:69:c4:ae:
         43:71:af:63:d2:99:39:53:74:a4:dc:08:e5:e2:43:be:3b:e9:
         50:d0:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:50:30 2025 by rpki-client