Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa
File:                     0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa (raw, json)
Hash identifier:          +iBIkbsNoZiRUZZoK9PuKXFUgfrlvyEfqAVVkX/eT38=
Subject key identifier:   90:03:C9:5D:A1:76:71:04:7A:74:3D:07:7B:59:E5:C2:C1:2D:4B:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB5D8DA2105BD53768B500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397213
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:5d:8d:a2:10:5b:d5:37:68:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=ac72198f-8306-4fa8-a954-f2ffad19d016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:61:0c:4e:ce:3b:00:c8:da:f4:8a:00:16:
                    60:22:41:47:ef:d2:0d:80:1d:d4:98:7f:5a:18:9c:
                    e4:4a:f2:73:b1:3b:ab:8c:28:18:54:de:16:b8:6f:
                    94:df:62:23:a2:f8:c3:f2:c1:89:07:1f:f3:c3:77:
                    3b:54:ee:d6:99:b3:cf:74:56:ff:44:cb:ee:39:17:
                    95:49:6b:d3:8d:db:32:47:db:27:90:ec:73:21:81:
                    11:27:e7:71:4e:ce:90:d2:ae:34:3f:45:f9:30:ab:
                    87:ff:4e:6d:64:14:1a:af:6f:25:58:63:a9:4e:be:
                    16:ea:2b:01:c9:20:e2:68:7c:cd:f7:63:85:3f:b2:
                    5e:55:73:77:86:43:cb:c8:87:84:35:dc:55:48:f4:
                    b3:20:ca:4d:40:9e:b5:d3:5e:18:ce:ee:81:df:5f:
                    77:dd:17:ee:e9:5e:06:1a:b6:08:f1:56:ee:cc:cb:
                    7b:1a:34:51:bb:b5:61:86:da:4b:ad:d3:2d:58:d5:
                    10:9f:47:46:05:e9:70:b7:41:84:73:ce:07:85:d1:
                    65:5f:9d:de:7d:9b:44:2f:55:d0:3f:18:67:e3:90:
                    54:46:74:88:2d:61:95:96:07:96:87:2c:f7:52:3e:
                    ee:42:65:a0:94:a6:7a:66:c3:ce:47:13:02:95:d4:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:03:C9:5D:A1:76:71:04:7A:74:3D:07:7B:59:E5:C2:C1:2D:4B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:43:e1:6d:c4:26:36:f1:0f:41:4e:f6:22:ce:75:3a:e2:0f:
         7c:40:7b:46:28:58:72:14:42:fe:59:4a:4a:09:ed:e5:5f:2c:
         8f:91:8a:b8:fd:84:5e:06:b4:d9:b7:ed:05:12:6c:dc:cd:6f:
         9c:13:c5:e5:21:0f:3c:0e:65:b0:3f:3a:1d:b8:0a:d0:99:5e:
         18:5b:11:2d:69:ba:a6:cb:76:03:de:0f:5a:f8:4f:68:65:09:
         64:72:e0:bf:57:1f:dd:5f:fd:29:e3:8e:23:06:af:2e:af:c8:
         3c:64:4f:e5:0e:79:a2:29:20:14:d9:81:8f:4f:a6:39:65:01:
         8d:d3:6f:74:05:ce:89:f6:18:b1:84:5c:19:41:72:51:30:46:
         f5:33:00:ed:8d:d0:a9:59:8d:bd:bb:e9:3d:87:69:f6:82:21:
         39:d8:42:41:3c:85:0f:aa:77:65:c7:2c:47:40:c8:53:74:30:
         78:0d:a6:d2:e2:30:35:d0:d2:f1:d2:89:19:13:1d:ae:d0:7d:
         8a:bb:18:b3:03:74:39:5a:1e:8a:3e:5b:d2:90:7a:5c:f2:04:
         54:a1:41:af:cf:53:51:17:30:7a:59:0a:38:8c:fd:45:cd:0d:
         0a:df:2c:95:df:61:3e:37:f9:fa:f7:3d:82:e9:93:57:60:42:
         ab:89:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:11 2025 by rpki-client