Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d7fc991a-eac8-37f8-9d04-786d2ed48acb.roa
File:                     d7fc991a-eac8-37f8-9d04-786d2ed48acb.roa (raw, json)
Hash identifier:          nKRZeDqE/2fi2Pm9pOZuBzrvsR2y9K6ixYp1FD7Yt/w=
Subject key identifier:   C1:40:E4:B9:C8:81:58:34:5F:B2:55:5F:CF:B4:E8:D7:E0:6E:16:15
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858493ED3D8649CDCA65B90C7C280
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d7fc991a-eac8-37f8-9d04-786d2ed48acb.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     14041
IP address blocks:        129.19.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d8:64:9c:dc:a6:5b:90:c7:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=76e9c27d-5c33-4545-a832-dcd416ed2a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:b0:ea:1d:99:e7:bf:43:9d:79:df:6d:24:
                    5e:13:20:84:df:db:9d:8a:b5:71:4b:1a:28:7a:15:
                    f1:9a:69:46:39:02:e3:f3:bb:52:b1:58:20:92:46:
                    e6:38:86:6c:74:86:65:ac:56:3a:b6:60:e9:20:95:
                    e8:d5:d6:61:08:9b:ef:b3:7d:eb:a8:65:86:a4:38:
                    96:b1:d7:1e:4c:6e:5c:c4:6f:8d:4a:c9:a3:a3:bc:
                    72:60:50:c3:fc:3e:56:3b:54:be:4b:3c:ab:50:8e:
                    09:57:bb:64:28:3d:41:a1:94:b9:a0:ac:80:77:c3:
                    fd:d7:8a:f3:20:87:ea:53:00:5d:35:11:2b:52:96:
                    cd:a2:02:c4:3e:3e:e1:ff:02:ad:25:6a:27:1c:09:
                    5d:38:42:ed:05:e5:82:c1:df:90:4d:b8:e1:90:c5:
                    23:6e:3b:01:52:20:1f:ba:8c:80:f9:9f:1b:5b:34:
                    c4:3e:d6:21:81:f4:c7:94:37:2a:98:47:32:35:da:
                    8d:b4:0a:45:27:4d:5c:a7:f7:c8:fc:d0:51:86:06:
                    ef:24:50:a1:57:17:0b:c4:61:0f:d4:62:7c:71:b9:
                    8d:a7:53:ef:85:6d:db:e1:57:98:d5:45:db:7e:33:
                    ae:52:40:2c:d0:9d:1b:e8:61:a9:db:f9:1f:12:ab:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:E4:B9:C8:81:58:34:5F:B2:55:5F:CF:B4:E8:D7:E0:6E:16:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d7fc991a-eac8-37f8-9d04-786d2ed48acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:31:d3:53:11:9a:80:e5:0b:19:c7:76:50:43:ca:1e:26:d4:
         1c:56:48:20:5a:af:49:02:6e:7f:a4:2b:93:2e:df:48:5d:ce:
         5f:bf:b4:73:ca:1d:dc:70:ac:c4:b2:0c:3f:8f:04:47:cb:45:
         2b:e8:57:28:76:29:40:3b:8e:27:97:76:7d:1c:13:72:2e:9b:
         4e:9e:c6:72:4c:06:30:61:2b:b1:fc:3c:a7:d2:d0:94:8a:15:
         f0:9e:98:8e:45:12:97:9b:a2:5b:dc:6f:06:1f:c7:c7:3c:80:
         e2:77:92:77:64:17:72:ae:fb:85:53:c5:33:07:cb:81:fc:b9:
         1b:f8:84:92:d7:79:67:c0:52:82:22:6d:68:04:8f:9d:97:1a:
         52:93:ef:0b:0d:15:41:17:3f:11:d4:cb:21:2a:36:10:14:06:
         f2:70:48:8a:9e:48:6d:ee:3f:76:8e:51:27:ec:92:fe:d6:43:
         59:0b:f1:6c:23:d1:9d:c4:4a:e6:59:32:77:c0:86:e5:ec:89:
         e7:d9:4e:c6:59:19:7b:0e:78:0d:ab:1c:53:7a:9d:a1:7a:61:
         84:04:63:42:e8:72:dd:9f:b5:33:63:51:e5:fa:af:be:30:0d:
         10:b4:54:14:e2:fe:cc:6c:f0:7f:2b:32:01:d1:51:ba:60:ad:
         21:07:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:55 2025 by rpki-client