Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
File:                     6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json)
Hash identifier:          wwGB9vE03j1O7eAaCnykR1/GBr7jSzaA/KkmZkjim0k=
Subject key identifier:   02:AF:36:49:FB:13:32:FB:FB:BC:9F:8F:C2:B6:27:C0:06:AA:DE:C4
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584851A56A9A96E4E35C7E5D2A80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        192.175.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:6a:9a:96:e4:e3:5c:7e:5d:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=614248a3-2112-4316-bdd5-68349faf1520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:55:ce:44:91:5c:5f:fb:f3:ee:93:79:6c:
                    9e:e3:a3:5a:41:e7:a3:a6:05:57:9c:71:e7:b1:57:
                    a5:3e:56:a5:59:1f:d5:0c:91:d2:1e:5c:b5:01:f6:
                    2c:1c:67:15:ea:ed:7e:a4:67:2c:d0:43:90:0a:95:
                    3d:c8:c9:43:c1:b6:42:31:16:2f:ee:00:b2:03:92:
                    3d:80:8f:ae:24:37:de:30:98:5e:25:70:0e:1a:89:
                    a3:81:ef:66:75:fa:b1:8f:9a:94:14:d4:84:aa:11:
                    3c:14:28:dc:da:6c:4e:13:5c:b0:08:3f:0c:92:52:
                    e3:da:48:99:cd:dc:43:55:bb:d2:df:04:ed:ea:6e:
                    90:c2:18:a3:a9:14:8a:5b:d6:b9:6a:1c:76:f7:30:
                    67:14:c6:62:08:e9:73:d8:6a:b4:db:f7:76:d6:8c:
                    15:13:40:cc:d3:fd:60:23:ae:1a:23:53:7d:74:d7:
                    60:3a:a2:cc:aa:71:3e:a7:0e:93:6c:70:2b:4a:6f:
                    5e:51:08:df:33:31:d5:d8:cd:dc:8d:94:12:e4:17:
                    92:8e:98:ab:f4:3b:9f:97:cb:ac:dc:7b:47:4c:9a:
                    94:85:3d:83:fd:1a:39:b9:a3:de:55:22:fe:a0:f2:
                    93:36:7b:31:90:96:bc:05:d9:4b:02:77:7f:53:0f:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:36:49:FB:13:32:FB:FB:BC:9F:8F:C2:B6:27:C0:06:AA:DE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:7a:5d:bd:22:df:3a:32:f0:29:10:da:5b:fa:3c:c2:52:
         b9:a3:30:ff:9e:a8:37:c3:4b:44:77:48:b1:b4:a1:8e:04:8f:
         b2:03:95:61:3e:6d:ac:31:d2:82:6e:e7:97:59:e3:20:81:75:
         19:e9:86:34:d7:06:fe:ae:8f:ce:9a:1c:b0:36:9e:a3:cb:84:
         a7:4c:42:8b:4c:29:54:b0:87:1c:0a:cf:84:87:a9:92:51:b9:
         6a:9c:d3:e7:3c:78:61:eb:8c:41:4d:36:6d:1c:31:90:d6:6c:
         74:ea:d1:3b:82:52:be:8a:3a:92:af:95:07:94:1c:88:69:18:
         6d:9a:81:2c:bb:c1:73:eb:d8:4f:20:52:7a:40:b5:9e:e9:83:
         ec:89:e0:a5:7d:cd:4a:ac:11:8f:d9:08:7b:18:9a:c0:83:ef:
         2a:ee:5a:1f:e2:d2:9e:e8:fa:7d:01:1e:01:92:df:99:82:bd:
         78:5a:c0:62:35:ef:1b:91:d7:16:ab:70:c0:40:ca:25:6d:dd:
         a7:9a:11:d9:f6:e2:83:c8:04:c3:52:cc:a3:1b:d7:b0:75:fa:
         c4:2e:e1:72:4f:35:33:86:e9:ff:f8:f1:9c:de:ab:30:9d:e8:
         72:7f:40:35:c3:87:dc:fd:04:52:f3:b7:57:f5:da:06:cd:9d:
         b8:4b:ff:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:53 2025 by rpki-client