Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
File:                     892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa (raw, json)
Hash identifier:          vMDDnQxesoNYRkIjW/ErInnWMPJrDgHbatlnI2Dgxvc=
Subject key identifier:   4B:33:E7:7D:BE:C3:33:0E:E7:89:30:7E:CB:36:44:D9:23:E6:6E:FE
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB168748A3B95567DA84DC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     19437
IP address blocks:        131.153.44.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:68:74:8a:3b:95:56:7d:a8:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=363b9ebf-b31a-48e7-a0d7-9c6688580062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:86:2f:65:27:04:f4:aa:3a:fc:ca:58:5b:
                    d9:26:91:fb:87:49:e9:b9:a1:f5:12:95:3c:57:a1:
                    44:20:10:fb:6b:30:6b:df:3b:70:a1:8d:f2:c3:36:
                    38:28:71:15:9c:29:34:e8:57:ee:2b:85:ea:fe:6b:
                    2a:24:d3:26:ba:46:30:c2:54:da:ec:79:cf:b2:55:
                    f9:0f:2b:70:dd:0c:06:8d:3b:9d:85:cd:44:fb:cb:
                    ba:06:3b:05:c8:19:7a:e1:6e:e3:1b:a8:5a:c2:cf:
                    e9:ee:4d:52:4f:da:c4:9e:f1:c1:6f:78:e6:7a:8d:
                    c5:d9:ab:e1:e8:0d:65:ea:11:fb:f5:c6:e6:6f:fe:
                    66:04:0f:79:3c:84:9f:e6:37:d2:38:a0:98:7c:07:
                    eb:a1:54:56:57:ae:50:44:73:df:de:76:29:8b:41:
                    28:de:87:5b:7f:e6:d4:f7:c5:e0:0d:05:7f:8c:35:
                    fa:d8:f2:bb:91:60:70:5b:fc:12:0b:f0:cb:4f:25:
                    c9:d3:ef:18:12:d5:1d:d3:45:e7:df:6c:a3:d6:d4:
                    14:77:fe:2c:2f:66:b2:ca:7d:37:11:ee:78:44:13:
                    1a:e2:ad:2b:83:4d:b3:0a:d0:ea:2b:7a:c9:7c:53:
                    a1:72:63:d3:36:c3:ec:f4:c4:92:67:bb:17:a2:e0:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:E7:7D:BE:C3:33:0E:E7:89:30:7E:CB:36:44:D9:23:E6:6E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:52:70:d8:73:62:0e:49:87:85:33:11:90:5a:35:d1:00:
         4f:bf:41:08:bf:88:57:6a:4b:30:81:96:9f:21:7d:5b:0d:02:
         70:eb:62:ff:7a:4a:8c:ed:cc:c2:12:98:da:e8:29:1c:33:1c:
         3b:59:40:e4:6d:49:26:b4:26:e7:30:8f:37:7e:46:98:56:f5:
         21:02:9d:ea:6e:5c:e5:a2:f6:7f:50:bb:0d:4b:86:12:b4:56:
         43:10:bb:a1:fb:88:4f:7c:03:06:9e:75:a6:a0:d4:37:88:c7:
         bf:d7:e6:f6:d4:78:fb:60:c3:89:02:78:d8:73:cc:c6:1a:31:
         02:b4:4c:3c:b9:23:cf:4b:c2:9e:e0:e6:1d:36:c8:10:ed:89:
         f3:c3:b6:7e:24:e2:b1:85:8e:3c:4e:f9:8b:80:63:63:9c:fc:
         20:85:a0:6b:be:09:78:15:cc:69:55:da:d4:75:75:65:35:81:
         9b:b9:89:fd:ef:ba:78:48:bb:84:6c:30:8e:67:c3:ac:7b:4d:
         19:ab:d0:90:05:d7:cd:e6:6c:d3:39:31:ab:10:c7:86:05:e3:
         a8:88:e4:ed:3b:1f:89:4e:cd:89:de:fe:03:08:cc:69:2a:d9:
         91:1a:fc:e9:3a:d9:38:a1:a6:c2:a7:17:4a:30:1d:98:cf:d8:
         3f:ee:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:22:56 2025 by rpki-client