Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/01f8fd76-e100-359c-b066-600183022e99.roa
File:                     01f8fd76-e100-359c-b066-600183022e99.roa (raw, json)
Hash identifier:          WQaz85rDjmF5ce3W/mrKy4eIPfl5LSlhmZn3QyKhH0M=
Subject key identifier:   53:2E:13:AC:77:EC:0B:E3:42:AA:B4:76:82:30:62:37:ED:65:53:5C
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858493C0939D11DE2FD44BA0A2880
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/01f8fd76-e100-359c-b066-600183022e99.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     21949
IP address blocks:        162.249.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:39:d1:1d:e2:fd:44:ba:0a:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=aff43dcc-2a37-435e-9360-ba87d54aac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:c7:d8:3c:9d:45:67:ae:25:00:81:56:38:
                    3c:e9:7d:ec:df:fb:58:b2:ce:f5:9f:6c:a7:bd:ca:
                    8f:32:3a:b7:2e:e4:ac:48:22:c5:77:13:8c:7e:80:
                    02:87:f6:24:ab:2b:45:25:ff:16:aa:7b:b3:54:c7:
                    8b:5e:ab:d7:d7:dc:0b:9e:a4:b3:98:4e:d2:dd:e7:
                    47:48:88:15:d0:f5:be:4d:08:72:b3:0a:ff:06:b1:
                    2d:e5:99:34:e3:e8:99:72:c8:76:a7:9a:bb:3a:86:
                    df:74:4d:c8:1a:ef:61:b7:7e:51:44:ce:4c:b2:f6:
                    3f:ee:05:1a:82:aa:52:02:7d:ff:3d:7b:47:87:0e:
                    42:c9:c9:8a:8f:dd:60:6f:16:ea:91:38:72:56:4f:
                    2f:ce:21:c0:f7:e6:2c:c3:e0:fc:e8:9c:8d:da:7b:
                    e8:ef:e7:ae:25:9b:d1:ad:33:6b:04:30:fb:0e:19:
                    e2:56:e3:87:22:ff:8c:8d:4f:e8:57:84:3a:27:40:
                    d3:7f:9b:cb:57:d8:c3:f5:d4:5a:55:98:50:41:2b:
                    0d:b6:17:37:cd:5c:10:b7:aa:66:f6:91:dd:34:90:
                    ae:b2:92:75:2c:d2:73:96:b8:24:7d:61:f4:f3:68:
                    ab:36:25:36:15:af:a4:d3:9b:0f:40:14:63:91:35:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2E:13:AC:77:EC:0B:E3:42:AA:B4:76:82:30:62:37:ED:65:53:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/01f8fd76-e100-359c-b066-600183022e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:79:d6:c0:8f:f4:9c:68:d7:6c:16:97:60:a4:03:c7:38:
         75:e3:82:0c:c9:1e:29:f0:01:78:7f:b1:85:9c:df:07:7f:2a:
         63:92:f4:12:f2:96:12:3f:ed:5a:98:84:d8:b1:d5:d2:39:40:
         1b:be:55:1e:7f:2d:cf:bf:eb:93:00:99:a3:fa:76:ee:4c:85:
         f8:03:e3:8b:d4:3a:30:c4:33:2b:b1:6f:45:ff:bc:1a:52:fe:
         bf:51:3b:b0:91:4e:14:ce:eb:cd:ea:b3:44:96:28:78:b1:00:
         35:fc:ad:0f:79:74:04:0d:62:13:ed:cb:e8:c8:b7:3a:e0:a1:
         5c:50:d4:82:ca:7f:71:09:ff:f7:5a:66:fc:4c:55:1e:7a:ea:
         b2:84:01:22:79:88:c1:25:48:fd:1e:7f:6b:9d:10:13:c9:74:
         cf:7c:65:0a:32:5b:29:83:c5:98:a6:f2:78:03:f9:4f:dd:2d:
         6e:3d:97:f3:39:ec:9b:40:a1:8a:0c:40:d9:d1:57:9d:43:c5:
         49:01:c6:cc:f9:66:00:e6:98:f3:38:3b:26:82:c9:96:a3:14:
         d3:c9:86:39:ab:c3:e5:73:55:f4:b9:d2:ec:42:d9:cc:dd:24:
         3e:e7:47:6a:9c:7a:b7:b0:90:11:8e:8f:c3:98:e5:d0:c1:84:
         4b:4c:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:46 2025 by rpki-client