Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa
File:                     40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json)
Hash identifier:          Q+TMYn9iEaNwoCwwih5IAoavYTCV7ALrb8gFWtLNdAE=
Subject key identifier:   7A:EE:50:CB:61:4E:7F:BE:76:27:4C:94:C9:F8:61:60:54:0E:88:4E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858488AE0A79E84AFA347E899C800
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        161.199.138.0/23 maxlen: 24
                          198.251.248.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a7:9e:84:af:a3:47:e8:99:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=5d6d43fe-f6e0-43e9-b295-aa0d1f7e7fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:10:e6:7a:9e:c6:0e:d1:eb:34:2e:43:6c:
                    b9:da:9c:5f:13:78:b5:16:44:e0:48:53:41:40:6f:
                    ef:60:04:09:35:64:9b:14:a8:dc:15:31:8e:71:78:
                    78:0e:67:6f:97:21:88:c2:d5:4f:d9:57:f5:2e:ea:
                    55:31:35:04:eb:2c:a3:7c:1a:6b:9e:ee:ff:49:c5:
                    c4:2c:b7:5b:9d:07:8b:d9:74:eb:69:fa:db:ee:db:
                    39:88:42:1a:f8:4a:ce:dd:2d:9b:97:bd:6c:d4:39:
                    73:b8:1a:6a:31:3b:03:49:b7:aa:95:41:c9:12:f8:
                    b6:df:91:cc:c7:b6:1e:88:0e:87:76:df:d8:40:5d:
                    cb:14:e2:99:45:0a:26:90:bb:bd:7c:f3:41:16:e3:
                    88:8d:56:ae:d6:20:61:67:5f:67:51:5b:34:65:a7:
                    ad:75:83:05:e5:a1:52:99:cd:af:ff:1a:0c:38:c4:
                    06:cc:e6:8d:bf:c2:0d:61:bf:15:7d:0c:41:48:69:
                    67:00:a9:00:26:03:cf:0e:90:db:5e:2e:7a:ee:73:
                    8c:bc:84:1b:81:20:e0:6a:19:3b:8a:58:c2:fb:dd:
                    b1:ca:a3:5c:7e:ab:99:5d:60:cc:c9:d5:18:cc:42:
                    44:7a:60:5f:82:21:c8:76:4b:af:43:92:de:97:70:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:50:CB:61:4E:7F:BE:76:27:4C:94:C9:F8:61:60:54:0E:88:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.138.0/23
                  198.251.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:16:49:9a:ec:eb:7f:57:75:67:0a:dd:3c:99:98:0a:8a:
         8f:3c:36:14:de:b6:e6:2f:70:53:db:67:9b:3c:80:0b:ba:16:
         8e:58:30:45:61:51:ec:44:5e:aa:e9:c0:f6:34:d7:47:15:23:
         6f:d8:8d:b0:1b:b2:db:e9:03:40:76:fb:75:b5:fc:5f:f2:6c:
         4e:66:fc:16:40:fb:14:72:eb:26:d2:40:cb:14:ae:da:a2:98:
         41:76:2e:89:e6:c2:64:83:02:6b:12:d8:4c:da:c5:1c:2f:2f:
         5a:1d:d8:20:b0:c6:41:8a:11:97:f0:e2:d6:00:c3:55:0c:f4:
         61:62:ba:94:63:47:59:0e:9f:45:12:04:17:46:c5:3c:c8:59:
         fd:e7:1f:cf:ea:bf:23:da:4c:57:91:18:e3:8d:d7:62:a0:c2:
         f7:47:4a:3b:4c:1a:ee:1f:a2:10:e5:30:5d:a4:36:90:2f:c7:
         cf:40:df:b1:dc:0b:1a:3e:5a:86:4f:83:f5:ec:69:b8:9a:b9:
         83:cd:ea:37:a4:3d:4c:9e:af:12:4e:66:03:9f:60:a2:f8:55:
         c9:95:da:88:a5:0a:31:d7:c7:ca:c2:53:5c:65:cf:c6:48:75:
         34:79:96:d8:67:d2:fb:0c:cd:ad:26:2e:c6:75:be:8e:15:de:
         c1:3f:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:15:20 2025 by rpki-client