Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa
File:                     48ed3810-816a-3e90-8728-bcb8b396c1a9.roa (raw, json)
Hash identifier:          tarsiVAfi0TJIHf6a+6MUXpJJZO2f37jFOaj9VoF1xs=
Subject key identifier:   35:F7:92:AA:0D:98:43:19:AB:7B:CC:FF:81:FF:A6:E4:EA:10:06:26
Certificate issuer:       /CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450
Certificate serial:       010D0C9F432858493243D95B95D3ED1D2858C480
Authority key identifier: A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     394688
IP address blocks:        192.152.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d9:5b:95:d3:ed:1d:28:58:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=31b53ca4-e8e5-4228-a086-9a544a7a74e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:c2:44:a5:8d:44:9b:ff:9c:ab:b3:4a:21:
                    0c:ab:b1:44:58:9d:66:2a:f2:ac:74:b3:eb:e8:a2:
                    23:46:e8:76:04:ef:99:bb:8e:dd:7c:e4:b2:8d:29:
                    1c:a6:49:aa:3c:94:2c:bc:0a:e7:0d:40:89:49:a5:
                    a1:08:85:42:21:99:1f:ae:ca:cb:da:9a:d2:83:7a:
                    4e:e5:5c:1f:7f:c5:ba:91:52:02:74:95:84:2e:b8:
                    d8:1a:18:59:46:f7:a0:38:5f:a1:1e:05:ee:85:6d:
                    31:2c:ae:b8:66:0d:53:a4:24:3d:25:42:69:aa:fb:
                    de:94:bf:d0:f9:6e:4b:98:42:57:93:5d:55:b6:ae:
                    62:3d:ce:1d:d0:76:78:46:d2:e5:b4:42:73:15:1b:
                    2b:56:b9:fd:c2:60:28:05:db:d8:22:32:9b:41:86:
                    34:77:03:74:69:09:24:ab:d6:90:8c:9a:ce:84:1d:
                    1f:8f:a9:6f:c6:3b:c7:cb:4f:8d:f6:d5:69:23:0f:
                    11:aa:0c:2a:6f:6e:1e:df:99:5b:0c:a8:d9:54:ac:
                    1c:a0:83:ca:fd:bc:74:47:d0:45:6b:50:5a:78:26:
                    43:35:97:a6:c7:ee:27:15:75:a3:c5:2f:82:d4:4b:
                    11:a9:3f:7c:0f:c7:30:c8:3b:05:fa:54:0a:1d:8b:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:92:AA:0D:98:43:19:AB:7B:CC:FF:81:FF:A6:E4:EA:10:06:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl

            X509v3 Authority Key Identifier:
                keyid:A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:da:4f:96:38:8c:95:29:55:e1:32:b6:c7:bc:6b:01:55:
         57:d8:b7:ec:9d:39:fe:75:1f:af:15:f8:89:cb:64:85:d2:4f:
         0a:8e:14:19:6c:1c:f1:64:11:5f:59:ab:f0:91:58:68:50:bb:
         89:10:92:ba:f4:3c:0c:4e:e3:1b:88:cc:86:94:18:aa:ab:a1:
         24:45:59:22:b1:d3:7c:f5:ed:0a:30:e5:7a:d1:37:e0:a1:72:
         5c:00:d2:6f:3e:ef:7b:be:0a:b9:42:0a:1a:c3:3c:d0:f2:d3:
         f4:fe:08:f1:83:67:16:2f:b1:d4:11:82:d9:44:a4:eb:2f:fd:
         7d:cb:19:02:3d:8e:48:a8:93:ee:db:5b:e8:f4:2f:35:a4:5f:
         28:55:d0:87:27:66:d8:b8:34:68:0d:c0:1a:ca:7a:5a:18:75:
         52:07:58:1d:51:cc:60:4b:14:f4:32:e3:ea:cf:3f:c0:7c:b6:
         62:d5:31:7d:70:cb:40:30:57:47:b8:84:46:95:59:3d:37:b6:
         bc:44:3a:60:00:56:f1:48:29:f2:cd:96:9e:a6:ac:23:2a:78:
         30:51:e5:db:db:27:9b:ff:0c:f8:b9:8f:6e:85:23:1f:12:32:
         09:be:55:6a:e5:eb:80:73:1b:ff:f7:76:ca:b3:11:16:ad:35:
         63:e2:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:46 2025 by rpki-client