Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa
File:                     04b2404f-71b7-3876-8428-f27437f41261.roa (raw, json)
Hash identifier:          1rlYLasgus0VIr+0NTQpKASUITuhfyoryDrVa9wZyyE=
Subject key identifier:   80:17:AE:AF:B0:54:E5:5A:51:2D:09:B4:09:4B:7B:A5:CC:82:FD:0B
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584858A053B21F6693B1AF4C5808
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        142.0.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:53:b2:1f:66:93:b1:af:4c:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=059a505b-15a3-4f33-835b-5e520b75b094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:5b:e7:43:97:da:ed:05:50:c1:26:33:cf:
                    47:1f:93:6a:0e:1a:44:a5:21:18:d4:7d:d2:84:61:
                    d4:7a:d9:af:a4:d0:5c:d9:77:47:92:77:6e:a9:c5:
                    ec:94:7f:c7:96:af:96:a3:bf:7e:39:69:9a:1b:6c:
                    91:fc:e6:f3:da:4c:ac:43:26:33:95:07:5f:9b:34:
                    eb:87:0a:a3:9a:8b:0b:f1:d1:ed:60:c9:e5:3b:99:
                    30:38:c4:b5:26:2e:5b:fc:a9:2c:67:39:ed:a3:8d:
                    bc:63:d8:5c:c4:92:77:54:63:5f:7e:f4:71:a5:de:
                    6b:fa:29:d1:18:04:88:7d:5f:52:10:2d:29:76:1f:
                    18:6c:42:47:72:fe:f2:2f:5f:61:dd:00:e1:41:d7:
                    1e:8c:8b:78:31:bf:16:a9:0c:7c:bc:b6:2e:87:b0:
                    ae:ca:0f:3d:e5:e1:4a:d4:d3:bf:6b:6b:0c:08:5d:
                    bc:0f:54:b6:f4:d3:ad:69:8b:f4:61:71:91:48:01:
                    96:0b:e5:35:40:29:f2:87:07:24:cf:5d:f2:f4:55:
                    aa:ab:a4:94:60:33:bc:f0:15:e4:45:d2:94:16:98:
                    d4:b2:24:7e:8f:08:b9:8e:e7:fb:dc:56:0a:64:b0:
                    cc:30:45:c9:6f:2e:bd:b8:80:e8:75:8c:30:c9:52:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:AE:AF:B0:54:E5:5A:51:2D:09:B4:09:4B:7B:A5:CC:82:FD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:76:90:d6:1e:de:80:59:88:e1:a2:b0:4f:b5:1b:d8:c9:e9:
         68:c3:bf:9c:d6:ef:dc:f4:d0:3f:ba:9f:99:c8:b3:2c:c8:17:
         ab:01:48:b4:91:2c:21:79:5c:4b:59:c4:8f:54:84:e1:92:7e:
         7b:b2:53:01:f8:79:82:dc:02:e6:38:65:ed:27:7e:54:e0:a1:
         20:79:1b:03:77:5b:c8:53:ed:8f:52:0b:b1:7c:cd:e3:0f:3f:
         60:db:9a:6e:98:6a:d9:a1:51:b6:c8:62:f8:42:a9:c2:a3:be:
         97:3f:b8:ea:49:d6:58:7c:36:3d:71:35:71:9c:ff:ef:44:80:
         c9:2d:1a:0a:35:26:41:fa:3c:58:43:65:af:08:f2:e9:fb:85:
         77:62:21:51:40:37:83:7a:d3:b4:2d:bb:41:69:a6:bf:05:fd:
         d2:48:ec:cd:8c:19:f1:7a:b9:93:b3:a0:a7:62:64:4a:a1:18:
         5e:c3:f8:a9:00:09:b5:84:4e:17:78:de:29:36:16:f2:aa:b9:
         6e:45:fb:fc:e2:53:79:fe:a8:f3:b6:c3:94:89:ee:eb:9d:4a:
         b2:48:78:04:57:50:9d:6a:fd:4c:75:e7:15:9d:b6:3d:4e:ed:
         62:20:10:81:6a:3a:1b:15:c8:2f:5d:f5:41:b3:e3:3b:a9:a7:
         a1:7a:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:34 2025 by rpki-client