Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa
File:                     b5b2dd17-d227-39eb-b530-306174de9aab.roa (raw, json)
Hash identifier:          oDjJbOwP2z7gEA8cpZ46kheKO6boynvq4VC9LEexOZU=
Subject key identifier:   BF:08:5D:7E:2D:51:0B:71:3F:86:5C:63:9F:15:61:40:EB:A7:12:2A
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F43285848143A7C1CBF3B9C3BDB60B220
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     16509
IP address blocks:        142.0.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7c:1c:bf:3b:9c:3b:db:60:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=c7c7087f-a4c1-4ddd-9506-48222997167f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:33:d3:f6:20:b4:76:b2:91:8f:55:e3:42:
                    48:00:5b:26:b8:df:c4:fe:ad:bb:99:8a:62:45:80:
                    48:60:0a:bd:6f:31:65:17:a4:f5:76:77:51:65:91:
                    21:5e:b2:ec:54:a4:05:cd:50:de:9f:ad:de:d2:b1:
                    dc:a1:a6:13:bd:d7:ae:b4:f2:f9:89:48:5a:33:b5:
                    d0:f5:86:59:a1:e3:8c:26:a8:b3:23:a1:59:67:0c:
                    94:d0:0b:9d:f4:f7:08:6a:9b:67:68:17:d8:54:1c:
                    35:98:96:a6:07:7f:24:de:b4:74:82:2e:aa:ae:a1:
                    a7:50:82:1c:bd:87:ac:77:fa:b1:44:0d:39:fc:15:
                    d7:78:de:fe:a7:30:4f:56:fe:93:22:2b:30:db:94:
                    a8:b1:4e:58:43:70:5f:23:a2:bc:47:b6:d3:08:ef:
                    38:e8:c9:75:6a:09:99:1b:96:9d:68:41:59:96:0b:
                    cd:63:a8:75:5e:ca:6b:35:f1:22:0e:75:7c:c4:aa:
                    ca:62:19:35:d8:26:1b:82:ff:50:86:9b:f0:e0:42:
                    03:b0:06:8a:77:1e:34:3d:8b:2a:1f:b6:f4:5b:17:
                    c4:f2:8e:49:e4:3e:92:b3:0c:c1:14:95:ea:42:43:
                    bd:0a:1d:cd:38:96:b2:b9:18:30:4b:63:b5:e2:fa:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:5D:7E:2D:51:0B:71:3F:86:5C:63:9F:15:61:40:EB:A7:12:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:1e:03:2d:43:98:d6:34:18:f1:ca:c9:17:34:c4:e6:5f:
         4f:4a:f1:95:cd:ea:47:34:cc:f1:bc:b5:f1:01:b2:ee:d3:8a:
         98:a5:f6:41:c8:13:a5:37:68:ca:55:ba:8e:62:eb:d3:90:7e:
         98:71:66:07:9e:f6:ae:60:db:36:dc:9e:c3:ff:d2:27:e7:8e:
         a9:56:b8:6a:0d:4e:e2:ad:06:37:bb:0a:b5:83:1f:32:0f:f5:
         26:5a:74:f8:7d:11:70:e7:98:9d:9b:c7:64:63:fa:f2:91:7a:
         af:30:b6:5c:b8:c4:45:dc:d7:23:ca:7b:a3:d4:1f:56:93:8b:
         40:87:e1:4c:fa:8f:60:c5:c7:a7:e4:a2:87:64:d8:3c:3b:19:
         d5:1b:3c:14:b1:43:17:6e:cd:4f:a5:4e:26:df:5b:9d:d1:a7:
         12:d2:b9:12:42:fa:c1:2d:33:59:b5:69:73:49:40:a4:fc:2d:
         a5:b6:34:cb:26:f3:de:21:67:7a:d9:e7:02:b6:d9:7d:71:ac:
         38:23:36:4d:f7:05:5f:43:b6:12:c7:bd:1f:e0:76:58:52:f6:
         22:68:b4:ce:66:10:34:ea:a4:b6:02:ac:c9:5d:3e:aa:bb:e7:
         02:c6:e2:94:0e:6a:f7:8b:73:13:2e:4c:30:0a:a2:0f:a7:00:
         ea:c9:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:39 2025 by rpki-client