Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa
File:                     f723bfab-57e9-3e15-8955-723df020ce36.roa (raw, json)
Hash identifier:          i8eXIBM/Q0sCOGnQaMhdYgfL4DxIuJfEbZxVTRekQWE=
Subject key identifier:   10:F0:97:29:DE:50:B1:83:8B:12:91:F5:4F:B6:8D:01:00:E6:BD:53
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213430EC07B878F1EEA1AC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa
Signing time:             Sun 09 Mar 2025 10:20:40 +0000
ROA not before:           Sun 09 Mar 2025 10:20:40 +0000
ROA not after:            Sat 07 Jun 2025 10:20:40 +0000
asID:                     577
IP address blocks:        142.114.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:30:ec:07:b8:78:f1:ee:a1:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:40 2025 GMT
            Not After : Jun  7 10:20:40 2025 GMT
        Subject: CN=1bc4f04c-7254-4a4d-8120-a54e12ed442e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:dc:9e:af:fe:34:fe:b0:6f:34:84:1c:3d:
                    ba:ba:1c:d2:ee:9f:40:70:35:24:9e:99:bf:cc:0a:
                    90:77:22:cb:8e:72:82:32:15:66:6a:95:c7:8a:75:
                    91:82:da:19:bd:12:4f:b4:7d:a2:59:6f:8f:9d:4b:
                    48:fc:d4:68:2e:f2:f2:2c:6b:86:a0:e7:a1:42:16:
                    cc:5d:6d:dc:d7:81:37:98:5d:c5:21:1d:be:7f:7f:
                    50:9f:70:68:eb:53:23:da:8a:18:6e:cd:f6:dd:57:
                    8e:1b:3f:d0:e1:7f:63:79:d9:8f:81:2e:5e:28:8d:
                    da:ef:7c:6d:df:d0:8c:66:94:db:f2:7f:63:35:fa:
                    d7:15:16:f2:1d:2b:46:22:ee:d6:32:97:14:71:ea:
                    8d:7b:eb:6e:78:75:eb:07:ef:24:1d:e3:6c:29:77:
                    41:a6:34:69:18:fa:e6:ec:48:e9:a2:b3:aa:6d:5b:
                    b0:61:c8:6d:9d:99:f6:3a:15:61:72:e8:7c:58:9e:
                    29:11:82:98:d9:d9:09:7f:91:0c:04:41:b0:57:30:
                    e7:84:82:26:7b:49:34:f3:f9:9c:0c:73:fc:4b:e6:
                    ca:e2:bf:db:23:07:b2:42:32:a7:fd:de:71:7c:2e:
                    2f:08:5d:74:6f:2c:b0:b3:c0:f2:a5:71:88:5f:c2:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F0:97:29:DE:50:B1:83:8B:12:91:F5:4F:B6:8D:01:00:E6:BD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:6d:34:c0:29:f1:8f:86:1e:e7:28:27:fc:9c:ce:b9:70:
         d7:b7:0f:e1:48:66:a7:83:df:1a:a9:0a:97:b3:99:a6:ad:3e:
         4f:cd:47:c1:4b:f3:c0:91:da:47:0a:14:95:8c:fc:d1:54:6e:
         7c:24:01:3d:46:65:04:2b:28:01:27:fc:52:cc:be:49:a9:bb:
         d0:b0:d3:b2:95:68:1d:ef:3f:2c:95:dc:a9:4c:1e:83:d0:d1:
         0e:f2:cf:33:be:c3:fc:30:07:b5:8e:7b:2d:f5:54:62:3c:3a:
         05:31:89:9c:c4:95:47:50:de:35:24:1b:08:92:af:8d:fc:35:
         d7:66:c4:bd:91:b4:e0:23:31:dd:3d:1e:44:5c:42:55:88:be:
         68:4f:01:65:3d:b7:a4:cb:0d:5b:90:ce:d4:d8:33:ed:ae:48:
         a0:da:2c:4e:4a:19:54:30:c6:08:16:7f:e0:e1:a9:c0:3f:50:
         48:1e:9b:6c:85:82:2a:8c:a4:7c:6b:3b:fc:dc:bd:c2:f1:a5:
         61:51:8b:e5:28:9d:b2:e2:57:85:fb:2b:82:ec:3d:7d:79:a0:
         4f:8f:6d:b9:c9:3b:6b:29:b8:b1:80:5b:94:3f:31:76:f0:4a:
         d7:0f:b6:37:9a:c6:9d:11:56:79:8c:31:65:f4:b1:bc:d1:8d:
         99:74:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:33 2025 by rpki-client