Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa
File:                     079ec49d-80c7-36fb-a80a-15036883ce48.roa (raw, json)
Hash identifier:          j6YjOCLMqLKUwUUjmIPzcDRxLmL+F5nAGJ6bubgafjU=
Subject key identifier:   99:C1:9C:61:50:DC:3F:D9:CB:ED:D4:47:5D:D2:EE:35:1D:6B:C1:8A
Certificate issuer:       /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial:       010D0C9F432858487CEB2DBAD4819FECCC22E280
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     400692
IP address blocks:        144.29.0.0/16 maxlen: 24
                          144.29.0.0/17 maxlen: 24
                          144.29.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2d:ba:d4:81:9f:ec:cc:22:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=ca243e2e-45bf-4780-a812-c42b29b25410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:74:26:d8:2d:93:e5:45:37:33:b8:2a:17:
                    04:93:91:29:49:fc:55:a9:c4:09:d2:d0:7c:f0:2f:
                    e1:00:a6:cf:3e:d1:ff:f6:46:53:06:36:7d:5e:78:
                    c7:bd:af:6a:f2:f3:80:8b:12:e1:1d:f2:9f:7e:f4:
                    f0:5b:e2:6a:e2:cb:4f:e5:89:f7:83:82:6c:ab:9f:
                    94:16:09:ca:e9:0b:74:b8:43:e7:07:32:8b:42:02:
                    f1:3c:94:a6:c0:84:d9:0d:5c:b5:c8:d0:33:4e:85:
                    0e:f5:b0:2c:6f:ad:e4:d4:82:1a:7f:cc:a7:b1:29:
                    6f:b2:da:8a:0d:1e:27:ef:c2:10:7e:89:d1:be:f3:
                    19:84:3a:62:63:a0:3d:f9:e6:dd:bd:dd:7e:1d:f4:
                    bf:6f:2c:0a:a6:0b:0b:78:a5:96:ba:58:7f:08:b3:
                    df:b6:9c:0f:6d:d5:b4:5e:75:63:9e:1e:df:5c:f7:
                    cc:90:83:d4:07:58:1c:c3:c4:d3:f8:0a:04:b5:c2:
                    a3:0f:bf:a8:eb:5c:b1:0d:ff:17:a9:99:d7:39:f4:
                    55:3f:b1:95:e7:9e:e4:5d:ea:75:4b:22:c3:7d:e5:
                    14:6c:ff:7c:2d:60:04:5e:be:3a:fb:86:a8:79:2a:
                    71:11:14:a9:71:62:78:da:34:03:cb:fd:56:ce:d8:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:9C:61:50:DC:3F:D9:CB:ED:D4:47:5D:D2:EE:35:1D:6B:C1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:80:15:7f:ab:2a:24:b2:42:23:dd:37:1d:73:a2:4a:c6:b4:
         d6:92:87:c9:84:4b:a6:33:79:4b:12:01:6c:8a:10:3f:ad:0e:
         a5:97:e3:83:68:24:80:24:ac:64:ae:41:be:70:e1:90:5b:54:
         8b:be:7e:f5:02:25:1c:21:94:63:b2:89:70:89:40:f6:76:60:
         da:08:f8:80:9d:5d:06:d8:c4:19:07:50:aa:f4:1f:b0:34:d1:
         fd:ea:b6:c6:2e:73:1c:d8:bf:47:4b:1a:f3:fc:2e:ec:4f:7c:
         d5:de:46:a5:87:d9:9a:cf:fb:72:67:85:ec:7e:59:f3:d3:84:
         2d:02:e9:84:1a:24:62:a6:fb:18:68:d3:88:ac:91:2e:0a:af:
         40:21:81:99:23:d1:fe:c4:ae:2c:8c:d9:00:5b:47:96:2b:47:
         b7:29:98:e8:04:2f:05:73:3d:d0:4e:45:8b:53:77:3e:84:42:
         c8:94:be:f5:9f:bc:e5:e9:52:4b:b8:bc:53:a9:08:f4:19:36:
         0e:d2:9e:fa:5c:e7:10:de:e0:22:8d:c4:73:c7:05:fb:c8:00:
         57:78:f9:24:16:d2:8b:63:b2:d0:6f:99:cc:e9:49:9e:ca:c2:
         46:d9:0e:7b:e4:bf:10:7d:00:a1:8c:34:0c:18:53:92:f7:37:
         dc:14:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:37:55 2025 by rpki-client