Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa
File:                     d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa (raw, json)
Hash identifier:          oJTWWo81Fe8fgJEr4ZjyeF0KpqTOKtM1O8+QtZrS//A=
Subject key identifier:   C2:23:27:D9:F2:38:24:FA:1B:AB:78:63:28:E6:82:21:BF:AB:D8:F4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487755DC5F15377F9D321C8F40
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     30103
IP address blocks:        149.137.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:dc:5f:15:37:7f:9d:32:1c:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=48e344d8-11bf-4e6a-834c-273d644e4618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:a7:21:09:1e:87:05:ec:81:8c:99:57:28:
                    0f:d3:8a:6b:71:21:89:57:ee:30:26:d2:6f:83:92:
                    b3:68:44:a1:98:0d:dd:a4:af:93:3b:d0:ae:c2:5a:
                    40:a7:f3:81:39:d3:10:81:41:07:8e:c3:f7:2b:c5:
                    2d:e5:77:6f:a2:b0:20:dd:9c:ed:c7:2c:6f:69:54:
                    dd:20:cd:5a:75:35:e7:27:b3:e1:b9:37:80:15:a8:
                    ae:02:45:94:d6:da:ce:f0:a4:e4:4e:f5:25:de:e0:
                    d3:b8:08:9c:ff:47:c1:9e:af:57:e6:01:42:e3:3a:
                    a1:c0:55:9b:6c:70:9a:1c:cf:44:e8:26:a0:d1:14:
                    40:ec:e8:f1:03:c6:2b:a0:48:8a:97:16:22:a0:27:
                    d1:38:3c:09:cd:f0:de:a8:3b:70:5d:b3:9c:bf:bb:
                    19:f4:1e:8b:1e:93:9c:b4:dd:af:b3:4d:c0:aa:1c:
                    89:f2:b4:b8:9c:a5:af:c1:c7:f6:8d:c7:0b:a5:9f:
                    21:8b:ff:4b:07:58:00:b2:01:9c:f5:b0:7b:59:b1:
                    9b:ee:b3:ab:da:dd:b4:37:3a:95:2e:09:e5:fc:8a:
                    cf:ec:d7:ec:9d:1a:9a:c7:24:71:5b:be:7d:a3:79:
                    64:89:a2:f3:ee:8e:d5:d9:93:b2:53:7c:e8:6d:f6:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:27:D9:F2:38:24:FA:1B:AB:78:63:28:E6:82:21:BF:AB:D8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:9f:49:be:ce:f7:d6:46:24:6a:93:99:d8:05:46:dc:b2:
         cb:aa:ec:21:3b:b5:1f:b8:11:46:eb:a0:9b:4a:86:cf:14:84:
         d5:ac:6a:c5:6f:d2:b6:94:53:1d:90:1b:22:72:20:f6:1e:06:
         66:93:a3:f6:0f:86:49:04:dd:f8:40:0b:17:a7:8f:62:7d:de:
         80:f4:1a:c2:dd:02:62:a4:28:60:77:b7:74:8b:7c:12:a2:91:
         dc:ad:c9:fc:7c:44:4b:83:2a:d8:c4:ed:44:fd:62:6e:ba:07:
         dd:7c:94:57:45:c5:dc:19:27:af:87:5a:8e:fa:b0:9c:7a:f6:
         e6:12:03:47:eb:f5:92:93:af:b5:e7:18:da:dd:94:b2:0e:21:
         d4:44:72:6b:8f:fb:4b:74:40:c7:d9:67:41:a6:fa:9e:ed:f8:
         03:eb:ad:f6:68:71:01:d0:a2:dc:93:a8:95:37:17:4d:9e:41:
         72:a6:97:92:ec:fe:5c:96:43:0c:de:08:e4:db:3c:43:8f:4b:
         7d:ac:b7:cc:97:ef:c1:6b:2e:4f:a1:04:8f:16:5d:0b:64:b0:
         e3:95:f5:8b:01:2e:14:67:89:9a:ad:10:6b:9f:79:34:af:69:
         1b:27:2e:0a:ee:fa:58:31:18:0c:74:ba:be:b2:3d:bb:69:82:
         fe:22:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:29 2025 by rpki-client