Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
File:                     135e9a6b-d871-31bd-aedc-3aee5546ac72.roa (raw, json)
Hash identifier:          KyoVjPaReKpS8K2McHi4vs4ZP49tIN+LugHAEdlzoK0=
Subject key identifier:   E3:52:80:2D:17:A4:D4:41:7E:2D:D0:CC:06:E6:49:A0:A1:C2:C3:D4
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285848FD56BC3C9E54FF7BA3811700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16696
IP address blocks:        148.59.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:bc:3c:9e:54:ff:7b:a3:81:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=dd4cd9c6-8541-4cbe-8d16-8b9bdf270baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:d4:a5:4c:9a:88:94:3b:42:cf:e9:61:a4:
                    2a:de:50:27:83:4b:67:5d:76:2b:72:cb:a3:72:cf:
                    88:ac:29:1e:c8:a2:aa:b5:04:9c:be:46:ab:3b:d6:
                    af:7c:37:b0:31:49:90:ce:15:cb:bc:0c:29:d4:51:
                    32:d2:87:56:ad:ec:b6:9f:0e:c0:02:77:b9:45:17:
                    84:3f:9e:46:0d:dd:12:67:0e:44:bb:88:f6:01:c7:
                    67:37:df:7a:ad:ef:70:7f:50:56:f7:23:d2:e1:86:
                    8e:6d:ff:02:ff:95:d9:ae:95:e8:ed:37:66:99:a7:
                    6b:23:84:2d:ee:98:c3:8b:1f:fb:db:b2:b5:7a:a3:
                    bd:da:fb:9c:81:d1:30:a7:19:f4:b1:8b:08:9f:d5:
                    31:f0:7a:b1:1c:a9:5e:8a:70:25:42:36:7f:46:ca:
                    08:90:09:5f:0e:7f:75:1b:b0:3e:5c:95:00:c0:1f:
                    ee:a3:6e:8c:5f:4c:f5:a3:5c:a9:35:29:79:21:20:
                    cf:8c:07:c2:52:c1:c0:92:80:4f:68:a7:f7:1d:98:
                    f4:88:da:7e:a7:21:8e:e8:58:32:02:47:82:45:91:
                    99:09:62:f1:bc:c8:90:f7:d0:87:94:70:cc:c7:25:
                    22:f0:35:be:ca:6c:68:73:11:72:e5:84:de:cb:00:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:52:80:2D:17:A4:D4:41:7E:2D:D0:CC:06:E6:49:A0:A1:C2:C3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:59:6d:a7:a3:cb:43:be:1a:54:cb:28:8b:7e:77:b7:f0:ce:
         9c:c4:f5:27:9c:09:42:18:c5:b3:8e:79:34:fe:37:8b:02:db:
         2b:07:ce:7a:85:4d:f1:66:24:04:a0:b1:84:ec:2f:6a:e1:86:
         63:c3:9e:25:7f:ae:85:b6:4a:c1:59:75:80:9c:e6:9e:60:64:
         0c:28:3a:19:1f:c8:85:dc:ea:8c:2c:5a:6b:2e:10:05:7a:22:
         e5:3f:66:c0:20:74:24:09:ee:5d:4b:5f:8f:a9:1b:c1:ce:89:
         fb:31:12:45:97:b3:89:94:0f:36:86:64:74:d1:62:85:dd:4c:
         f0:66:ba:0a:4e:a7:b2:19:b2:de:40:48:fa:e8:27:07:fe:67:
         d7:92:cf:3f:9e:25:f4:14:2b:7a:4f:76:9f:52:97:3d:24:7c:
         47:c4:5e:2e:96:79:a2:1e:1f:d2:5a:72:fb:60:1f:f6:e6:38:
         51:2f:15:8c:ae:5c:77:2e:be:b2:16:cb:5a:f6:39:a0:9f:82:
         b6:32:28:2a:f4:46:8b:7d:38:b9:0a:04:dd:83:9d:f4:47:43:
         39:f3:af:42:02:46:49:0f:64:c5:f1:38:5b:c3:84:39:f0:a8:
         b2:54:44:b0:33:55:a7:85:fb:08:97:3e:5a:a2:64:c7:fe:45:
         42:6f:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:48 2025 by rpki-client