Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa
File:                     ae9fd340-bed2-3574-9398-92708ea0e3a3.roa (raw, json)
Hash identifier:          hHoc2l8Hf5wesUPqz1PjF8d5F8+6TdSTu1McqH600gU=
Subject key identifier:   D8:FD:D0:9B:2E:6C:64:99:4E:1A:EF:B4:24:31:C1:CF:B4:AC:EE:3F
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F432858493ED3D778428B8A85FFCA2F80
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     63018
IP address blocks:        165.140.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d7:78:42:8b:8a:85:ff:ca:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=3859e328-d941-4e70-98f9-6b112b548d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:9a:0d:9b:d6:96:b2:bc:db:23:cf:64:8f:
                    90:01:c7:86:23:09:95:a3:62:ba:aa:23:c5:e5:ff:
                    12:2e:07:95:21:58:50:36:b7:6e:35:9f:99:a1:2e:
                    88:88:cb:56:4e:10:3c:a5:af:cd:09:de:ed:69:6f:
                    f3:10:2a:14:c5:10:dd:b0:77:04:41:fe:e0:06:e2:
                    91:58:b5:5f:11:2e:bc:49:be:4d:c0:1b:70:3d:70:
                    cc:bd:9a:e1:58:e3:92:a7:33:94:fb:c9:2d:ed:b0:
                    a5:3a:a9:86:6f:5a:33:58:c8:f8:65:0f:f8:2c:9a:
                    82:46:13:20:a4:30:e5:8d:73:c1:39:8c:2f:a8:bc:
                    f0:b5:84:a3:58:4e:24:b9:90:f0:1f:6d:2a:66:2e:
                    54:f0:9d:bb:c9:de:b2:5d:4e:d5:ca:33:ed:cd:62:
                    5a:44:98:38:0c:b6:57:05:d9:66:f7:68:da:4a:9f:
                    fe:ea:68:10:e5:bd:14:4e:75:d0:3b:a2:18:d9:11:
                    29:19:38:3d:1a:34:4d:f6:fa:91:45:d4:a3:07:0b:
                    73:ef:b7:7c:35:96:50:da:d5:c7:9e:04:32:25:97:
                    94:2a:5b:25:8b:66:2c:83:84:64:c2:37:cf:25:cf:
                    44:96:b5:bc:cd:bc:75:f0:08:ba:da:b0:8c:fc:5c:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:D0:9B:2E:6C:64:99:4E:1A:EF:B4:24:31:C1:CF:B4:AC:EE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:af:17:b9:44:f5:a5:c8:59:c5:51:5c:0f:52:15:5f:2b:32:
         bc:25:b3:e3:b7:34:7e:e6:98:ca:f9:05:9b:1b:5b:56:4a:6e:
         85:44:58:6b:66:88:97:db:2f:b9:fa:c4:ff:37:cf:c6:c4:3a:
         43:4b:e5:04:be:03:01:ae:aa:92:fa:08:50:69:a7:30:de:fc:
         e0:4a:59:dc:59:66:ee:e8:6e:86:be:69:fa:c3:fc:63:fe:04:
         22:d6:f6:0b:6a:48:34:3d:21:9c:40:ec:a5:a9:5d:fd:18:d0:
         56:b8:16:88:06:55:91:6b:7a:0c:fc:7e:7f:57:0c:51:99:c7:
         f6:08:9e:9f:73:dd:6d:2d:c1:08:ef:1b:79:02:0a:f9:35:f2:
         98:aa:12:b8:3e:cf:9f:05:a0:45:ca:34:48:78:74:36:33:c5:
         ad:ce:e3:01:58:c3:be:ff:c2:e6:69:3d:2d:90:b5:1d:9b:1f:
         f4:98:61:8f:c1:74:e4:8b:58:75:9e:05:c2:58:eb:bd:42:39:
         82:7b:7a:17:f4:81:fa:87:77:2b:68:b5:7b:58:62:e2:ef:40:
         5c:69:f9:09:f6:84:60:2c:8b:a4:b6:2c:66:28:04:55:f1:34:
         1c:1c:3e:8a:d6:e5:9f:ff:2b:79:1d:20:10:da:5e:a2:ae:04:
         ac:98:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:32 2025 by rpki-client