Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa
File:                     7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa (raw, json)
Hash identifier:          VnK/4ud/ZkAYnA1eUiWGU3B7gErACU7Yqr1unPtdeZo=
Subject key identifier:   43:3F:F0:C8:66:98:62:5D:39:67:4F:FB:CF:1D:EA:F1:85:F4:AE:53
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F432858489A3B4D4702AB966AB56FEE80
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        216.147.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4d:47:02:ab:96:6a:b5:6f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=1df0bd3e-10a8-4644-a1cf-e5be4b4eb28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:8c:b9:fc:5e:47:07:dc:59:f4:06:c7:fa:
                    06:5d:89:1b:e0:6d:f4:70:7d:2d:56:9c:07:2f:a1:
                    0d:4f:53:c7:50:65:4f:86:89:e3:53:38:b3:bd:bb:
                    e7:08:78:34:22:6e:11:30:86:fd:11:54:18:a5:b2:
                    77:d9:45:46:fb:81:51:8d:47:a3:19:e6:8a:46:f5:
                    a2:a7:49:31:d2:63:79:c0:c9:17:83:4d:42:84:3b:
                    e0:a1:ba:32:f4:e8:b1:80:61:45:20:c3:b2:69:57:
                    9c:ce:8d:59:84:d3:df:7a:cf:04:2e:0a:dc:38:c1:
                    e7:7c:c4:86:ed:6b:bc:f0:8f:b5:bf:6c:92:a3:7d:
                    48:96:d4:20:63:35:e5:bb:eb:3e:71:9b:a2:53:68:
                    f6:04:e9:41:7e:6a:59:15:a4:95:7f:ae:f3:c4:69:
                    6b:a8:0d:7f:a9:c2:11:8f:cd:c2:59:7d:49:32:26:
                    c6:4a:9a:76:f1:e4:45:ae:fa:8c:23:6f:d4:ab:f0:
                    a6:1b:f9:e7:9e:e8:a6:08:e9:a7:95:63:0a:37:c0:
                    f9:53:37:b7:d7:f1:59:7c:25:52:3c:53:21:7d:37:
                    0b:37:a5:5d:f7:93:76:7c:fd:4f:8f:fa:2e:7f:c9:
                    93:c6:11:e3:d4:35:23:80:e0:58:4a:47:9f:76:29:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3F:F0:C8:66:98:62:5D:39:67:4F:FB:CF:1D:EA:F1:85:F4:AE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a8:6b:07:6b:21:f1:32:b4:19:aa:4c:17:6c:1d:a6:5c:bd:
         1d:94:24:80:07:73:4e:e3:b0:ec:fa:14:70:3f:a4:1a:b8:af:
         0a:05:fb:bc:18:57:a4:32:0d:94:4e:f5:ca:ea:1e:ba:3d:39:
         64:15:c5:2a:d3:cc:ea:ae:7b:47:31:fb:e0:42:42:f2:dc:7d:
         7a:77:08:d5:b4:25:8d:3d:0d:56:ea:d3:04:b7:26:65:24:d2:
         e6:83:47:28:32:de:aa:0a:c1:f4:fd:bc:ab:bf:4a:6e:ff:c6:
         2f:71:06:a4:3f:c8:0c:d7:97:8c:69:03:bc:ce:a8:f3:80:d8:
         23:18:68:45:57:b7:77:fd:cf:f3:d4:7e:7f:34:ef:41:83:da:
         48:3e:ca:0b:99:67:10:8a:1b:01:b7:87:8e:6c:bb:56:bd:b1:
         d5:5a:e6:37:50:88:9a:be:8b:5f:05:0f:7f:14:52:a0:a5:d7:
         36:7f:74:7a:94:4f:da:61:f9:5a:23:4a:7d:ee:a9:87:e3:c4:
         b0:ba:ac:0e:10:9d:2b:a5:d5:38:58:a0:5d:f6:68:6d:6e:5d:
         2c:3b:96:84:18:e7:a1:80:ca:49:3d:89:02:b1:b6:d7:4b:f5:
         55:e9:c1:88:56:74:2f:d6:57:b7:1a:75:80:ad:eb:20:f4:7a:
         8b:07:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:58 2025 by rpki-client