Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
File:                     0e5a24d6-c66c-333e-a464-a98bf11ab068.roa (raw, json)
Hash identifier:          RN9v2h0uLrdUgaob4gHvWiePwC/K91TgBjnaqjvT3+M=
Subject key identifier:   39:45:87:8D:34:88:4B:10:E6:33:0A:AB:00:DC:C9:2C:43:86:9B:91
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F432858494733E2F804C888CED45FAC80
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     23154
IP address blocks:        143.116.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e2:f8:04:c8:88:ce:d4:5f:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=da180be4-65c8-46e1-8228-a68eafb99726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:18:aa:50:93:a3:45:30:b6:b9:c0:fc:39:
                    d4:3b:f6:a2:1a:60:08:eb:34:73:10:4e:fa:b5:8d:
                    3a:e9:28:fb:e7:6f:55:5b:93:bb:b7:a2:e9:32:68:
                    30:53:e4:b0:7f:74:54:eb:04:22:90:04:64:df:d6:
                    17:f7:99:21:8d:7c:68:0e:87:9c:ef:6b:e5:41:e1:
                    9f:59:43:0d:27:78:8a:75:2b:bf:52:d6:21:dc:74:
                    b8:fe:08:f2:8e:e7:31:6d:55:8d:82:9e:da:5d:c7:
                    12:35:af:9a:52:7a:ca:db:57:e6:03:b5:a8:43:8a:
                    54:7f:77:c0:95:9d:b2:d3:1a:d4:18:d4:ba:e3:a4:
                    01:0f:bf:0e:ed:01:44:fb:7d:26:29:a5:df:ae:a5:
                    3c:97:af:b6:e7:54:3b:15:42:04:30:32:22:81:92:
                    b6:98:33:fa:2d:72:84:6b:cb:0f:03:8a:3b:6b:3f:
                    7f:0f:88:cd:66:9d:4d:1e:cb:e8:96:ce:68:e3:9e:
                    91:4a:90:dc:15:ab:f9:4d:86:51:c2:c7:14:fd:ea:
                    e0:dc:13:3b:53:6d:f2:8a:11:44:48:38:2d:7a:37:
                    cf:08:e1:21:8e:13:70:08:51:3b:86:32:ba:6d:62:
                    d0:9c:25:f4:21:9c:6f:bd:d3:6c:94:64:a0:6c:23:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:87:8D:34:88:4B:10:E6:33:0A:AB:00:DC:C9:2C:43:86:9B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:3d:26:c9:c6:d5:16:a9:c9:a4:81:3b:5a:2d:f5:77:01:
         2d:fa:38:d5:73:4f:80:93:c1:bd:44:ba:2e:af:54:b4:63:d2:
         bb:fe:cb:14:67:3a:4e:da:ef:17:d2:d8:13:48:bf:18:e6:2a:
         80:a2:6a:3d:d0:f6:33:2a:f7:cc:37:33:df:21:a2:0e:4a:84:
         4b:4f:e0:e7:2e:ae:c4:1f:bf:1b:6d:7c:30:f5:9f:09:bd:0f:
         3e:e0:70:e0:9c:88:c6:4a:3b:3b:89:ef:7f:9a:25:68:19:c8:
         ff:1a:98:b8:ee:73:53:af:38:ec:d1:1e:62:df:f3:13:e2:6a:
         2c:d5:2a:90:f1:9b:e8:63:21:bf:9a:c6:c5:9e:9b:b5:41:38:
         68:8f:83:51:22:44:35:ef:d3:a6:3b:40:b6:b4:25:2d:5f:25:
         3a:73:f0:8b:32:48:30:56:8b:23:77:4e:70:d4:2b:4a:74:15:
         a5:1d:f9:84:a2:1a:c5:ca:15:ec:4e:b0:ab:6c:54:68:ea:94:
         3c:6c:83:6b:ef:29:91:23:a7:8e:df:02:d6:76:31:12:84:d0:
         66:e3:c6:4b:40:6c:10:a7:6f:29:98:14:20:7e:72:90:33:42:
         94:48:ab:31:4c:04:2e:e8:ea:a9:11:a0:50:e5:fd:36:b3:56:
         74:98:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:31 2025 by rpki-client