Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da590b37-d38b-3049-9031-bb35e825eb80.roa
File:                     da590b37-d38b-3049-9031-bb35e825eb80.roa (raw, json)
Hash identifier:          5zhTv6XLA6NgyN8lipKICY0dkO2k6v9KKRcL1MPzFmI=
Subject key identifier:   F0:52:C5:07:1F:0E:B8:31:48:F9:F8:D7:8A:F8:74:AC:1E:0B:51:60
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2979FD2B27813EA026FF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da590b37-d38b-3049-9031-bb35e825eb80.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:79:fd:2b:27:81:3e:a0:26:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=f10567a6-d70e-4edc-afe9-30a66709e1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:af:cc:12:ea:95:e1:9a:c1:af:88:38:ea:
                    50:1a:e3:86:63:15:e0:3c:9a:69:a0:d5:0d:1c:82:
                    67:0c:b2:ec:7d:f3:a5:65:eb:e6:89:a4:dc:81:4f:
                    d3:75:33:ad:4c:66:06:12:73:35:8a:f8:c1:02:a1:
                    6b:15:92:35:25:7d:69:43:a2:44:78:e2:5d:11:ae:
                    b1:c8:2b:d8:c3:41:45:23:24:8a:3c:bf:9e:cc:08:
                    fa:b1:2f:93:57:3c:c1:3a:67:f3:1e:dd:7f:e0:77:
                    15:fe:0a:b4:73:a3:42:55:e7:c3:6c:36:c1:d3:6f:
                    19:4a:34:76:d3:86:8b:48:eb:b4:38:c7:c5:53:ab:
                    00:7e:1d:cb:b8:82:1e:38:13:3b:2a:3d:45:46:36:
                    91:75:f4:1b:99:c7:c1:8d:82:2b:18:3c:86:1b:8d:
                    4b:6f:eb:90:49:93:99:35:97:88:67:b0:8f:1b:c2:
                    06:44:68:81:dc:6d:64:65:a2:b2:8a:56:73:07:a9:
                    a9:cb:25:f1:5f:5f:36:1f:b7:73:f3:49:c6:e5:c7:
                    42:09:bc:ae:fd:f0:3d:25:a5:d6:dc:de:f0:3d:45:
                    4c:a5:22:b6:b6:8e:d9:9c:3d:4b:76:b5:46:d5:64:
                    b8:7c:8e:83:e9:83:08:3c:7e:16:59:1d:77:e4:37:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:C5:07:1F:0E:B8:31:48:F9:F8:D7:8A:F8:74:AC:1E:0B:51:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da590b37-d38b-3049-9031-bb35e825eb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:65:23:5d:3b:f2:7a:1e:c1:0c:49:30:39:c3:65:37:0a:6e:
         0f:69:f1:91:a5:63:96:a6:20:5b:09:f8:a9:ed:cc:d7:22:b4:
         6a:77:4f:97:db:1c:5e:1c:a5:f6:2c:81:88:64:87:51:55:4f:
         84:bf:24:32:1b:82:53:35:be:32:ec:1f:1e:53:16:dd:60:6c:
         83:55:ab:d8:3b:6b:bf:45:4b:7c:83:15:7a:40:2f:df:17:d8:
         b6:bc:01:cc:c3:cc:2a:ec:e7:48:c5:8b:fa:03:b7:e4:5b:c9:
         3f:e4:50:57:1a:85:58:7d:3b:8f:1c:36:05:a5:84:55:8b:64:
         d5:36:94:94:a6:e5:a6:f8:6d:fb:35:7d:66:78:1e:c1:d7:a1:
         a1:5b:c8:45:ca:5b:ef:2a:ad:bd:94:ba:06:c1:0e:12:b1:4e:
         96:c5:fd:a3:04:02:d9:52:62:43:aa:1d:27:3c:38:de:31:08:
         69:b2:43:97:8e:92:f2:85:bc:73:a0:9b:8c:49:d8:71:e3:27:
         85:01:f2:a3:e1:81:38:2a:90:95:92:1b:8c:86:c2:a8:a0:b7:
         99:4c:1e:87:8e:5e:31:24:27:22:c0:59:5f:7d:56:e8:01:49:
         2b:4e:fb:73:71:cb:1c:91:5b:0d:6a:8e:9d:73:0c:ac:53:ea:
         94:c7:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:29 2025 by rpki-client