Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa
File:                     20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa (raw, json)
Hash identifier:          tCtsKbn2nuCRYDhUEmM3jfMWhWYXlT5Q6E/xZW3dPn8=
Subject key identifier:   83:CF:BA:4D:5B:A2:95:F8:8E:A0:0D:78:30:91:4C:9C:7D:26:8B:AE
Certificate issuer:       /CN=f243c5da-1962-405d-9607-4c295bcb5015
Certificate serial:       010D0C9F432858486695C027DB3D7AAEBB374600
Authority key identifier: DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396535
IP address blocks:        199.101.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c0:27:db:3d:7a:ae:bb:37:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f243c5da-1962-405d-9607-4c295bcb5015
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=d16e5f7c-7666-40e5-be51-68daa72ba33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:65:00:d1:6f:a5:c4:12:46:fe:fa:20:a0:
                    fe:21:cf:71:ad:0c:66:38:74:73:d5:a1:2a:07:c8:
                    f2:80:c9:a3:e3:b9:17:82:84:7b:94:9b:3b:c4:90:
                    44:74:c4:4e:f2:db:e9:4f:58:a4:66:ec:d3:b9:43:
                    62:38:66:58:97:98:72:06:47:2b:15:a0:f9:94:8c:
                    e4:79:c1:1b:62:d8:38:95:2b:57:d8:95:50:94:91:
                    92:85:08:19:dc:9a:4a:6c:17:a1:a4:fc:bf:75:95:
                    32:f7:14:44:37:24:2e:d0:f5:57:a0:e1:63:f9:b6:
                    63:36:14:70:2c:31:3f:ee:0d:c5:07:66:47:b9:45:
                    b6:e1:79:1d:4d:e3:a6:bf:75:17:07:ea:aa:2a:5f:
                    14:2d:b9:40:0f:f5:b3:64:0d:80:81:38:41:67:57:
                    c5:e4:bb:6c:7f:bc:ad:b9:e0:94:5e:32:1c:a7:2c:
                    2b:9d:7f:96:e6:e5:d2:c6:8d:ba:d2:79:bb:9f:6d:
                    46:6c:94:67:fb:1b:4d:e7:b3:a5:e7:63:22:ce:25:
                    48:5a:e5:12:7b:17:79:84:0e:33:6a:0f:da:6a:df:
                    94:4b:05:d4:6a:e3:4d:51:1d:f7:cf:de:4e:6a:72:
                    c5:8d:bb:83:f0:09:03:e3:e7:e2:e7:fc:85:74:cf:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CF:BA:4D:5B:A2:95:F8:8E:A0:0D:78:30:91:4C:9C:7D:26:8B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl

            X509v3 Authority Key Identifier:
                keyid:DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:d8:09:c5:90:07:20:bc:85:10:5b:ec:44:1d:9c:69:80:
         c5:db:03:51:3b:83:6b:33:f6:dc:a7:08:32:f0:01:6d:66:2d:
         d8:4b:d6:fa:03:fe:65:2a:6b:98:b8:9c:a8:8f:ce:ab:d6:a7:
         16:ea:f3:f5:e0:ff:f6:b6:1d:aa:86:c7:ff:00:dc:71:d8:64:
         e7:db:8c:a9:52:65:2e:ba:76:4e:64:d7:b8:3f:2c:26:a2:42:
         2b:ec:5f:e0:85:32:0c:e1:aa:a9:e0:58:32:76:ab:b0:b1:89:
         b3:49:2a:ca:b6:cd:ec:b8:73:06:e2:40:4c:dd:c6:22:c1:89:
         6e:2a:73:ad:3c:5a:36:0b:ce:97:cf:77:2f:dd:16:83:bc:ec:
         2e:ec:de:4c:f1:26:39:1d:cb:4a:bb:7b:ed:66:0f:65:5d:d5:
         54:ca:e9:e9:57:50:8c:f0:15:3b:24:3f:be:86:c0:9d:57:a8:
         00:02:93:34:ad:8f:9f:72:06:91:1a:ca:96:7e:71:f5:84:44:
         6d:d3:ce:97:dd:d7:6f:c0:95:cb:ad:d2:a2:dd:61:0c:9e:f5:
         59:83:2b:00:9c:d6:e7:5a:d9:9b:d5:4b:af:81:a3:d0:e7:14:
         bd:79:13:1c:10:b7:b3:78:6d:27:ea:01:36:73:12:6e:1b:57:
         49:55:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:06:08 2025 by rpki-client