Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23e0d121-9086-3819-8577-ec2f8abb8e2a.roa
File:                     23e0d121-9086-3819-8577-ec2f8abb8e2a.roa (raw, json)
Hash identifier:          lsAwVqW5oR4UzmfdogmTxs2DCe+1VI9K5FfafTEa9lk=
Subject key identifier:   1A:EC:A4:1D:9E:94:A7:7F:89:94:1C:67:1D:B3:7D:EB:6D:D8:42:CD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29102F0D1DC5BA5C800740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23e0d121-9086-3819-8577-ec2f8abb8e2a.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     63131
IP address blocks:        142.120.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:10:2f:0d:1d:c5:ba:5c:80:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=a9094cd4-c21d-4ef9-8eaf-c413306dd6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:c7:19:94:28:82:cd:00:b5:7c:11:cf:20:
                    d7:2c:b6:ea:9a:82:d0:30:36:95:1f:e5:67:2f:46:
                    fd:e5:96:e7:d0:56:22:74:39:aa:73:ab:c4:6e:e1:
                    53:60:6b:d2:a4:25:0e:b1:36:55:5d:01:1a:25:90:
                    70:5e:6b:1a:08:cc:6e:3e:9a:dc:99:4f:f9:20:f8:
                    3d:40:1b:01:34:df:82:69:28:d5:47:99:35:f5:ad:
                    a1:07:85:b2:c6:da:94:49:4f:88:6b:97:b9:fe:52:
                    e8:98:4b:0e:45:fc:d1:00:11:65:be:75:eb:90:aa:
                    db:48:17:05:01:da:1e:0a:5d:c8:a0:36:a0:1a:3e:
                    87:a5:6e:88:0d:69:80:1f:a5:cc:2a:3b:44:d3:4f:
                    2e:63:37:39:12:de:6b:f4:95:c3:f6:71:71:f6:2e:
                    40:11:9b:f9:05:53:a6:b2:84:7a:ff:48:4e:b0:c2:
                    72:26:47:3e:26:39:b6:44:00:90:5e:53:97:cc:68:
                    dc:be:84:bc:43:68:c9:03:c4:c5:54:6f:10:2c:a5:
                    93:9e:cc:b1:d3:46:1a:69:f2:fb:f4:71:b7:9a:ec:
                    d1:0b:db:0c:5a:42:d7:21:5a:6e:38:4c:a4:c7:a2:
                    bc:4c:22:44:81:a3:d3:ed:aa:e2:d0:85:68:50:18:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:A4:1D:9E:94:A7:7F:89:94:1C:67:1D:B3:7D:EB:6D:D8:42:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23e0d121-9086-3819-8577-ec2f8abb8e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.120.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:26:b0:41:f4:2a:60:19:c3:bb:c4:a0:41:47:2b:72:fe:
         84:1b:ea:20:78:ad:87:c3:bb:40:d8:8e:b7:24:bf:fe:aa:91:
         a5:d7:31:91:14:8a:11:e8:ad:87:5e:dc:7b:3d:ca:b5:72:53:
         a5:74:20:73:f1:6c:d7:e6:2f:ce:15:61:3f:fb:79:10:84:08:
         42:12:a4:7d:42:4d:7b:5c:5d:11:32:08:65:96:c2:d1:ea:d5:
         86:4f:63:e9:ee:4a:3f:32:0f:d1:98:46:6e:c1:1c:d6:aa:14:
         65:62:c4:8d:09:ba:ed:6f:0b:45:7e:57:85:50:1c:d5:fa:cc:
         7b:d1:a1:7e:44:67:9d:0f:c8:17:b9:33:83:46:5c:20:a1:fc:
         1e:9d:b2:ad:0b:af:15:df:55:f6:fa:ff:92:4c:a6:c4:06:a5:
         d6:d5:b9:e2:95:62:fa:65:3e:f4:d0:17:bf:d4:6b:20:66:6a:
         58:0d:7c:75:91:05:a4:c9:b7:9b:de:37:20:73:ee:aa:4b:26:
         a2:37:ad:d5:d7:fc:f8:fc:3d:f0:68:d1:8a:a4:d7:b1:b5:05:
         63:09:90:e8:16:70:f1:96:d0:32:f1:a5:d8:0c:0e:f5:d0:03:
         55:39:4d:52:b4:d8:64:09:e9:db:a4:ea:60:15:9e:41:26:bb:
         6f:6f:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:31 2025 by rpki-client