Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/bc34b87e-f75f-3f28-aa93-820ba7881d60.roa
File:                     bc34b87e-f75f-3f28-aa93-820ba7881d60.roa (raw, json)
Hash identifier:          l6aDhJIvpq2SILWaJMZDOQPzUjaOXGDiE5JU/57ktVo=
Subject key identifier:   0F:57:29:D1:87:BA:AF:4A:12:0E:C9:DD:1F:5C:99:E9:F0:F4:0F:9F
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584953C447AC650462A67CB11280
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/bc34b87e-f75f-3f28-aa93-820ba7881d60.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396253
IP address blocks:        149.19.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:47:ac:65:04:62:a6:7c:b1:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=4a230542-d446-45a2-ba3f-5fc502566cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:72:96:e1:3a:43:bc:6a:f6:d0:5b:1a:6e:
                    f5:76:da:cb:3f:6a:93:32:d1:9c:e4:c4:ac:0f:ff:
                    6f:ca:1a:88:91:e1:43:b2:cd:47:59:99:f3:ae:01:
                    b9:20:8a:bb:42:e9:98:e3:65:1a:39:42:b9:c1:71:
                    f1:89:12:9c:4b:c9:10:7a:db:9f:34:27:e9:dd:d0:
                    64:10:bf:d3:1f:7f:a2:12:5f:bb:9a:2d:eb:cd:16:
                    e5:f0:ca:46:32:4e:0e:e2:0e:2e:69:65:88:22:70:
                    20:40:17:07:24:a9:b9:f1:e8:9f:5d:4b:05:37:82:
                    f0:51:69:68:c3:c9:18:0b:92:c2:d3:db:11:1e:56:
                    3e:63:07:73:a9:68:3c:46:50:b5:da:c2:c5:c9:e9:
                    bf:e5:37:a5:ba:e2:a7:c1:24:40:c3:21:2d:47:a9:
                    3a:0f:15:f6:5c:78:84:8a:87:97:f8:17:7c:c8:a9:
                    c3:02:e3:df:06:19:56:66:db:ff:bf:5c:ca:0f:0c:
                    53:4d:41:48:33:ba:82:09:9b:d5:88:e0:bb:b9:25:
                    69:7e:e3:a9:f7:63:55:b4:2f:6d:6d:f0:56:3c:b0:
                    6a:62:7b:36:92:d3:90:ca:9d:6e:a9:b4:44:92:cb:
                    8c:3d:aa:c0:e7:aa:d3:2c:a8:01:3a:d8:c7:df:1a:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:57:29:D1:87:BA:AF:4A:12:0E:C9:DD:1F:5C:99:E9:F0:F4:0F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/bc34b87e-f75f-3f28-aa93-820ba7881d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:dc:6e:9a:c6:69:86:49:9a:da:7e:dd:5a:86:6f:cc:da:
         d9:22:4b:8c:7f:e4:89:db:0b:42:9e:23:ce:84:68:ba:27:09:
         9f:f9:75:9f:1d:0b:79:37:aa:2d:e5:37:01:15:7e:b3:ca:2a:
         04:d4:ac:ff:8e:00:6c:1f:51:cb:c1:31:c6:76:50:6a:6b:a5:
         a8:eb:c1:d1:af:06:3b:6a:95:af:d4:45:d3:46:1b:b1:1c:e4:
         40:76:70:8e:76:08:57:6c:ab:59:98:49:ac:2c:f6:d1:c6:27:
         f5:20:b6:6b:0d:d2:f8:7e:8a:1d:00:07:03:c9:54:db:d0:c9:
         0c:8c:41:10:53:fa:48:33:58:2d:7b:17:be:4b:53:30:52:9b:
         0f:69:7e:9c:bb:f9:92:36:61:c9:51:be:4f:55:9d:d0:05:eb:
         f2:be:75:83:01:4e:3d:93:71:70:47:7f:61:28:a6:67:36:52:
         10:1d:f7:e7:1b:69:67:8b:3a:8d:8f:8d:f2:d6:df:3d:46:04:
         05:30:67:ed:47:ff:0b:e7:46:ec:c7:ae:25:31:a8:7e:30:fb:
         e6:db:f8:0a:37:41:8e:e1:3d:e0:9e:c1:c2:1d:60:32:69:3d:
         f3:bd:57:07:61:6a:36:c9:27:99:fb:68:c8:4b:16:d9:a7:16:
         ea:d1:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:19 2025 by rpki-client