Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
File:                     b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa (raw, json)
Hash identifier:          weeNHpLI6yT3wfuvwPL5lMcIesiAbFCaWycpIZH1Qw0=
Subject key identifier:   15:9D:47:52:B2:5C:3C:8A:D4:F4:18:A0:70:CC:CB:70:6E:CA:58:7E
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F43285848AFF6FAA26E5265ADF941EA00
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
Signing time:             Mon 27 Jan 2025 20:50:59 +0000
ROA not before:           Mon 27 Jan 2025 20:50:59 +0000
ROA not after:            Sun 27 Apr 2025 19:50:59 +0000
asID:                     400653
IP address blocks:        165.123.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:f6:fa:a2:6e:52:65:ad:f9:41:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Jan 27 20:50:59 2025 GMT
            Not After : Apr 27 19:50:59 2025 GMT
        Subject: CN=d63907d0-83ba-4195-a6cd-366da697e5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:2e:71:81:e3:87:d9:01:a7:e4:6a:8f:7d:
                    73:42:2a:ed:e6:42:75:e5:eb:a7:36:7c:42:d8:4e:
                    7c:12:f8:b7:27:33:f8:a3:d2:6a:e3:d8:f6:4c:88:
                    11:73:e6:98:90:37:2c:9f:cc:a6:4f:78:f0:20:24:
                    11:c0:01:36:c0:5e:b4:c8:27:4e:50:b5:6a:44:cb:
                    b1:fc:25:75:16:24:70:1e:a7:34:0d:b5:aa:a2:6a:
                    f1:00:b2:71:0d:0b:57:7b:54:0f:e3:c3:9a:d6:96:
                    1b:50:8b:e1:5d:ab:30:c8:49:80:89:3c:2e:c7:14:
                    94:d7:7d:fb:c2:22:65:f2:ba:4b:9d:ca:fa:75:62:
                    f5:e3:8d:48:8f:9a:42:a9:6c:79:85:91:6e:a0:24:
                    ea:3d:56:82:df:e4:30:75:c5:1a:dc:5e:57:1e:57:
                    cf:02:a8:8a:38:de:24:0c:af:37:0b:bf:b0:1f:38:
                    c6:98:3c:38:59:1f:4b:a5:82:d2:60:93:79:47:13:
                    b7:90:49:7c:e4:d6:12:2a:f4:c8:fb:6e:2c:ba:06:
                    d1:7e:7e:c0:7d:b0:a6:88:90:0e:16:3f:e7:6c:e1:
                    b5:54:5c:49:cb:6e:19:8b:97:50:35:b4:ab:44:fc:
                    cc:a1:e6:6b:94:be:32:c3:d5:a6:4b:6b:3e:9f:ba:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9D:47:52:B2:5C:3C:8A:D4:F4:18:A0:70:CC:CB:70:6E:CA:58:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.123.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:fe:3e:2a:2d:0d:2d:60:ec:5f:f6:b4:a0:a5:de:55:83:
         a3:d7:07:63:eb:68:af:ba:51:aa:c0:14:b7:4b:81:79:b9:a6:
         9c:77:8d:8c:ab:c6:28:68:6e:de:ab:96:54:96:33:b9:9c:24:
         eb:a6:6c:94:0d:c7:49:f9:63:8c:dd:a6:4d:8b:3d:1e:7a:a2:
         57:0a:c5:f9:d8:10:55:ac:7a:5a:a5:0d:a0:c5:b0:31:e7:b2:
         05:e9:96:c1:17:93:88:0a:51:7d:5d:43:41:8d:4a:61:c4:85:
         be:98:8d:e4:50:a6:b1:c1:d2:fc:90:5b:2e:fc:84:c4:66:42:
         b3:92:15:73:f8:f6:d1:66:9d:d6:cc:68:0f:6c:57:5e:e8:e3:
         9d:83:ae:98:11:84:20:8c:5d:52:fc:8d:13:54:f4:64:3b:16:
         5e:d5:78:8c:a6:ce:6f:fa:c7:fd:27:a9:93:a4:f4:ca:2a:e9:
         04:7e:9f:d6:28:42:2a:c4:e7:35:42:0e:52:3d:32:a1:23:39:
         27:eb:19:01:38:dc:f8:70:77:a5:bb:a6:64:08:62:0f:8d:37:
         0d:19:d1:e2:e4:e4:24:ce:8f:88:f8:23:21:9b:95:d2:a8:72:
         78:c9:2f:24:0c:7a:e4:5a:cd:b5:01:b4:94:7e:02:6d:82:14:
         ee:d7:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:17:13 2025 by rpki-client