Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93f2c936-061d-3404-a244-53e0fbc60e93.roa
File:                     93f2c936-061d-3404-a244-53e0fbc60e93.roa (raw, json)
Hash identifier:          VjO20y39Uzb0MCppotUteA6j4SykKjNwMYwmP+JiaK8=
Subject key identifier:   87:E4:6A:63:8E:A6:F0:6C:55:DE:F4:52:90:A1:EB:90:BA:38:A6:13
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB6C183CBED028D3868680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93f2c936-061d-3404-a244-53e0fbc60e93.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397240
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:6c:18:3c:be:d0:28:d3:86:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=c113e7f1-18e9-4c4b-8e94-800630e54928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:79:7e:79:4d:5a:77:c8:ad:a4:d9:ea:69:
                    94:55:da:13:ec:80:99:68:74:c7:b2:2a:40:af:c6:
                    c0:11:ad:c3:77:40:a8:c2:a6:d1:93:46:4a:da:11:
                    1f:50:b9:09:a9:68:a6:2c:e2:68:17:94:ee:5f:53:
                    09:37:e0:42:e1:8b:f5:5f:b6:19:fe:b0:b6:b2:54:
                    fe:86:37:83:83:5f:29:9a:77:ff:02:e5:d2:ea:5b:
                    fb:98:91:d8:38:56:47:84:4a:7f:1f:a4:29:48:b5:
                    6e:b1:4d:7f:7d:22:11:f3:a7:f6:e9:61:2b:e0:16:
                    c8:ba:b7:ce:ee:72:dd:b0:4a:0e:5d:f3:24:48:d5:
                    9f:f5:ef:8c:8f:1d:ab:19:92:88:c1:f4:ff:6a:f1:
                    2f:23:75:89:91:2b:7e:28:f7:41:fc:53:06:1d:c9:
                    a3:a0:f9:2d:64:1e:57:73:f2:d6:86:f7:89:db:5c:
                    bb:a0:ce:86:8d:eb:48:21:a0:77:a6:29:0d:14:bb:
                    ac:0e:83:61:17:27:4a:5c:15:73:89:b1:83:2f:05:
                    8d:67:21:cc:27:7b:ab:d7:e0:c5:a4:01:5c:66:fa:
                    ce:c4:00:21:46:77:97:11:b9:b5:54:d9:14:bf:42:
                    cb:5e:ba:13:09:42:2d:d6:63:1c:20:0b:68:44:5e:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:6A:63:8E:A6:F0:6C:55:DE:F4:52:90:A1:EB:90:BA:38:A6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93f2c936-061d-3404-a244-53e0fbc60e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:bf:86:b3:4a:73:78:45:44:0d:0d:f5:dd:ae:8d:0c:0b:
         65:88:9f:57:71:51:37:57:ab:e3:05:52:3c:e8:0d:9b:fe:f7:
         93:ba:23:77:87:d8:25:6e:61:6f:0f:41:0a:e7:6c:5e:d7:2a:
         5a:2a:42:e4:4c:f6:93:15:06:58:c1:60:96:82:52:ad:73:5d:
         92:d8:0f:fd:1a:b8:c2:7e:a4:65:d3:be:c9:40:a0:3e:d6:cb:
         e3:89:ab:31:8f:81:8c:4c:ed:14:6f:89:40:89:6e:a6:51:6d:
         7a:48:9a:fb:94:6a:f6:3f:ba:14:97:ea:58:17:bd:5d:01:27:
         2e:77:0e:92:b8:e7:e1:4c:59:cc:7a:ff:4b:60:e4:81:76:72:
         b2:50:6d:ff:b5:21:dd:53:e6:dc:62:b4:e0:8c:29:98:4e:f4:
         52:a8:b3:34:c1:f3:15:73:84:5c:6b:3b:df:bb:60:42:9c:62:
         f8:5f:b3:68:4e:45:cc:1a:a5:6f:93:98:81:c0:d0:ab:aa:66:
         ba:33:c6:d6:8c:b1:6e:4a:fb:da:a8:7e:3a:49:42:2b:b8:71:
         1b:15:dd:7f:36:67:8f:44:c0:e7:44:73:fa:58:dc:d0:01:1e:
         0b:53:47:ac:43:52:10:ed:60:61:ae:98:a5:15:72:54:52:65:
         8b:7f:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:06:45 2025 by rpki-client