Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
File:                     1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa (raw, json)
Hash identifier:          RIFot/U/oYp244pMYqf44vFieNuEO6eOuPBRVeYtoNs=
Subject key identifier:   F9:E5:66:52:58:C5:0D:AB:6C:38:70:8D:D2:1C:AB:0C:40:0C:64:9F
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858493243E3BBDF79E36E74094840
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     15313
IP address blocks:        150.252.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e3:bb:df:79:e3:6e:74:09:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=667a47d7-61e7-45bc-84ee-28f313e01894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:41:5b:1c:cd:20:4a:ba:5c:a7:88:b9:61:
                    d0:e0:3d:5e:c4:be:4c:94:b4:14:8b:d5:07:76:65:
                    5c:48:ad:0d:0c:2c:4c:f9:4d:30:72:b2:f5:64:11:
                    23:ac:d4:b6:39:63:da:d4:21:2c:cd:a4:7f:20:28:
                    e6:e6:bf:2c:8c:95:16:5b:df:2e:c0:98:6d:73:03:
                    b8:04:63:10:12:39:27:37:aa:5f:3a:ab:40:83:f5:
                    7f:85:31:b4:c2:a6:c6:e3:a7:35:c1:a1:9e:81:2c:
                    9e:ac:fa:b8:10:70:52:21:a3:4d:e4:03:2f:0c:c6:
                    62:e9:5f:0e:8c:6c:fa:bc:5b:b2:16:c9:1e:87:c1:
                    2e:44:10:23:fd:f7:06:1a:9d:14:13:af:d3:05:97:
                    4d:d0:0c:5d:38:e7:a9:23:06:ee:80:a6:1c:7e:77:
                    30:96:00:61:af:14:52:b3:5f:fd:b6:7a:b7:83:3b:
                    a0:11:7b:bf:5e:42:2a:6c:1c:58:1c:2b:3d:ed:39:
                    18:bd:e9:d4:5b:4e:90:c2:65:f8:d7:b7:0c:dc:f7:
                    d5:8b:41:0c:01:76:77:90:37:7d:ae:60:27:b2:9e:
                    7e:c9:49:c3:45:eb:df:2f:de:d0:03:4b:98:b4:d1:
                    a2:ce:bb:9d:54:ee:1b:99:e7:0c:cf:71:d6:ba:e2:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:66:52:58:C5:0D:AB:6C:38:70:8D:D2:1C:AB:0C:40:0C:64:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:be:f9:fd:33:fe:c8:85:2f:12:34:89:14:25:82:67:6b:d6:
         dd:46:57:a0:25:93:9a:b8:95:5f:47:dc:97:a3:c1:9d:4b:0f:
         a8:c0:6d:12:41:54:ba:01:9d:40:f8:59:6f:8b:e8:c5:01:b3:
         fc:2d:51:73:b2:9a:fc:45:f2:df:31:51:46:a2:ea:b6:a6:ad:
         e5:15:02:77:66:ec:38:03:23:de:4c:74:69:a9:2b:5d:33:c8:
         c5:8a:5d:38:ee:04:33:62:51:fe:ea:65:74:09:01:94:bd:76:
         1b:ef:47:8b:81:a7:6b:74:1c:57:74:91:e6:db:16:a0:cd:cb:
         7f:d6:a1:80:3b:f2:44:7e:f1:ae:09:af:ea:7d:9a:3d:61:df:
         9c:d3:56:7a:a9:bb:c8:af:48:84:42:8b:83:db:cb:89:c1:f6:
         df:2a:73:ff:61:c1:4b:9f:3d:d1:dc:84:d8:2f:c3:03:98:b6:
         e9:f3:b0:44:de:16:c7:51:c2:e6:e3:b5:c6:24:5e:fb:a7:c1:
         51:0a:c4:ff:47:d5:fe:7b:ea:12:30:1a:4e:fe:31:09:07:b5:
         2e:87:85:26:e1:5f:6a:41:ae:b8:4c:a8:57:e1:1c:ae:17:1e:
         ac:97:b9:a5:3f:9b:a5:63:14:1b:21:0a:19:d7:fa:42:9c:74:
         f0:23:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:26 2025 by rpki-client