Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
File:                     d57e62da-a629-30aa-89c2-03aeac4923de.roa (raw, json)
Hash identifier:          +q3H4IVVBuBADLkZyxwG2u4x/GywfKYpIGfm+lh4dq4=
Subject key identifier:   8F:E9:53:20:66:A7:15:5C:8B:AD:DA:72:91:68:F5:0B:BD:51:B2:95
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA6A40AFC884F4B855F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        142.111.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a6:a4:0a:fc:88:4f:4b:85:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=8713b6c9-51af-435f-b6a9-f00a31ddd8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:53:1b:3e:82:d4:34:0e:62:4d:f8:c0:31:
                    e0:f1:a6:22:4c:88:7d:c0:d7:7c:19:e1:89:aa:83:
                    40:67:17:0a:c8:0f:30:36:13:f7:aa:46:b9:0a:e1:
                    ae:b0:3c:dc:49:69:be:7e:2d:49:14:47:dc:48:75:
                    5d:ae:22:03:cb:1f:2f:04:b8:af:61:e3:0e:39:be:
                    37:8e:10:55:b9:41:3a:35:8a:a0:43:f9:6a:eb:43:
                    84:a8:e9:34:24:c3:0a:d6:6e:2c:25:8f:8c:ec:d5:
                    00:7b:23:c3:d0:65:14:53:d2:de:90:c2:81:8a:85:
                    41:83:f1:1c:0b:29:5d:81:c5:84:7d:ed:cd:5f:f0:
                    de:f3:10:39:c6:7e:0a:05:88:41:25:ab:37:1d:c4:
                    2d:9c:f8:6c:79:75:23:7b:48:52:0f:41:19:39:51:
                    cb:ac:db:fc:6a:70:c1:6c:8b:3f:2d:22:e1:e1:ef:
                    97:a3:25:fe:d0:f0:6a:84:2f:75:43:68:2d:7d:55:
                    c8:e9:2d:a1:aa:42:c4:16:8e:52:06:10:03:f3:76:
                    8b:60:77:3d:b4:b1:7d:9e:07:d2:7c:81:23:2d:b3:
                    e7:fb:82:30:8b:28:54:9f:68:c7:df:89:f3:0d:c0:
                    47:79:76:9b:6c:78:49:36:2c:3f:e3:8b:e5:cc:a9:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:53:20:66:A7:15:5C:8B:AD:DA:72:91:68:F5:0B:BD:51:B2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:10:8f:1b:d1:35:63:71:cf:13:e4:70:7e:7c:f9:9f:f8:56:
         4c:6b:db:47:d8:71:80:78:37:d9:01:c7:e1:02:b9:35:17:e1:
         31:09:55:5c:1b:71:2e:63:13:d4:d8:cc:85:46:1a:c4:9f:f3:
         c8:49:54:95:18:4e:5a:6c:8a:2d:db:02:35:5a:c9:81:1a:85:
         3b:ff:f8:81:26:84:1d:4e:aa:7c:86:5d:81:b5:4f:12:94:70:
         6a:3f:46:96:19:d3:8f:46:43:7f:19:ba:dc:a9:c5:97:f7:13:
         70:a2:a4:83:19:9f:6c:e8:68:dc:cd:f9:62:fd:3c:58:a6:6f:
         34:c9:9b:e5:52:f7:da:d1:1b:9c:98:8e:49:4f:ce:5c:41:76:
         c1:f1:5c:7d:a6:64:90:20:8d:a2:a8:58:46:4e:b6:15:d4:42:
         e8:09:f5:03:48:ad:7b:c2:af:d8:92:2f:f7:6e:55:eb:05:4b:
         dd:65:d3:b8:96:d6:1b:c7:23:52:26:ac:04:56:14:b7:ed:4e:
         f6:b9:09:1d:4b:a1:dc:3a:2e:cf:17:2d:eb:3e:84:b1:f9:2a:
         3f:66:30:54:a9:6b:d3:8c:82:87:bc:b2:78:53:e2:1f:b5:3e:
         5b:93:00:b5:bf:4d:d3:4b:ae:2a:e1:9b:ce:0a:8e:09:5f:63:
         31:14:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:00 2025 by rpki-client