Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4c2d7e9d-3d6f-3f65-b562-9c6a7d69d18e.roa
File:                     4c2d7e9d-3d6f-3f65-b562-9c6a7d69d18e.roa (raw, json)
Hash identifier:          fassbv+HF5PT+9KGoYNmevQzRwM4zEcsOXboHhSmTII=
Subject key identifier:   00:E0:22:F4:CC:F5:41:C5:38:E7:F9:36:F2:BA:A6:05:F1:F0:F3:72
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F432858489BA0B622E7D15967792A0400
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4c2d7e9d-3d6f-3f65-b562-9c6a7d69d18e.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     26658
IP address blocks:        146.148.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b6:22:e7:d1:59:67:79:2a:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=ae34ef49-0656-4844-b0d2-55a40667ceab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:c1:16:ea:00:bf:95:0c:8e:ab:27:d3:78:
                    bb:a7:bc:05:f0:fc:6e:a5:9d:8f:06:d3:8a:3a:9a:
                    6a:39:97:35:b6:ad:c6:7a:57:a7:61:75:a5:8b:d8:
                    45:8e:58:83:c0:0d:40:d5:4f:8d:79:e6:25:1c:b6:
                    ff:28:df:64:62:cc:46:fb:92:48:a9:84:9c:a6:f7:
                    17:3b:76:29:54:cb:ef:cb:70:c4:76:c1:5d:e5:30:
                    eb:45:eb:19:84:93:37:86:eb:51:39:47:81:7e:f7:
                    5c:6f:8b:76:a8:7f:5a:5d:1e:4a:29:17:3a:ca:08:
                    fe:99:9d:b8:6e:00:68:b1:83:2b:12:35:44:8f:57:
                    b1:40:46:03:64:71:73:6b:83:8b:9d:bb:cd:9d:c4:
                    76:9c:94:68:ee:46:49:14:15:bb:64:cd:1f:5e:55:
                    61:1e:ea:e0:63:f2:01:a1:0b:4d:f4:fd:57:3f:31:
                    40:8e:2e:1c:ce:46:14:10:88:b4:75:bd:83:8f:f2:
                    79:21:59:78:e7:27:79:5e:64:05:92:b5:e6:1b:40:
                    f0:c2:10:03:cf:b2:0e:31:fd:3d:2e:a0:df:d3:fd:
                    e3:f6:40:26:c0:3e:26:02:46:a0:c6:1f:e2:ea:94:
                    17:45:b2:38:34:16:98:36:30:5f:48:97:f6:70:86:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:22:F4:CC:F5:41:C5:38:E7:F9:36:F2:BA:A6:05:F1:F0:F3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4c2d7e9d-3d6f-3f65-b562-9c6a7d69d18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:21:ef:cd:0a:67:1c:a5:9c:8b:5c:c5:52:55:bb:d5:e2:75:
         e0:a5:13:07:24:3c:04:62:d0:fe:b7:18:35:d3:69:0d:6e:00:
         7b:af:9e:21:2d:e4:62:27:9a:e6:de:b4:44:29:a3:a6:e3:70:
         16:11:f2:cb:d8:89:3e:91:3b:5f:6c:2c:a2:8c:94:21:4d:73:
         33:99:07:74:88:d4:ed:9d:ca:a8:59:ee:da:04:dc:a9:3b:98:
         f2:da:31:13:61:a2:7c:26:3c:a2:74:28:de:51:9d:3b:11:43:
         c7:67:9a:4c:97:7b:db:d6:a4:25:32:dc:af:7a:4e:02:be:aa:
         33:87:c5:ec:11:44:0a:e9:64:48:ea:70:67:80:7f:cf:3e:ee:
         1b:81:da:c7:cc:1a:2a:d5:f3:26:12:fc:98:62:50:17:73:7f:
         31:b1:b1:28:d1:c3:fc:df:2c:01:68:0e:d8:fa:86:07:85:c2:
         6e:d5:35:03:40:cf:cd:b7:18:26:3d:73:9f:82:d3:50:74:ef:
         d5:c0:72:15:3b:48:3c:3e:60:e4:3a:1c:a0:39:c2:09:99:ad:
         1f:10:c5:9e:4d:71:df:3d:cf:4c:5b:ab:94:8d:ac:7b:6c:40:
         2d:61:0b:8f:2a:32:73:e8:84:f7:93:d2:75:29:59:61:d4:29:
         6e:42:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:50 2025 by rpki-client