Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/b8df30f2-65a6-36ab-ba53-492f52e0b416.roa
File:                     b8df30f2-65a6-36ab-ba53-492f52e0b416.roa (raw, json)
Hash identifier:          OQTtMdxym8+cR0EJDMO/+5lfAd8S0OdQcfVncWv9uEw=
Subject key identifier:   3B:21:04:B4:85:D1:FA:2F:B7:E1:1A:B3:3C:E6:7E:B5:6E:E4:F1:B8
Certificate issuer:       /CN=e45b2423-bd81-480e-93e3-8cc66e601340
Certificate serial:       010D0C9F43285847C44C85F25CF5AFBCE653FC80
Authority key identifier: A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/b8df30f2-65a6-36ab-ba53-492f52e0b416.roa
Signing time:             Mon 04 Nov 2024 10:52:34 +0000
ROA not before:           Mon 04 Nov 2024 10:52:34 +0000
ROA not after:            Sun 02 Feb 2025 10:52:34 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:4c:85:f2:5c:f5:af:bc:e6:53:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Validity
            Not Before: Nov  4 10:52:34 2024 GMT
            Not After : Feb  2 10:52:34 2025 GMT
        Subject: CN=6a61b963-9cdc-4e5b-b51a-9154ee883d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:9d:2b:12:f1:6b:4b:2f:f7:76:ec:6b:8e:
                    2d:ca:75:dc:c7:ad:97:83:f3:4f:e0:57:91:54:2f:
                    b9:a2:f5:c2:c7:5f:46:9d:09:2c:86:10:58:a1:ac:
                    bb:0f:97:19:5c:33:f9:42:65:f0:f3:4c:ca:4a:69:
                    ea:fe:80:75:18:55:a3:c7:74:ad:ee:a0:ea:a1:35:
                    9f:5a:36:14:db:a0:ab:3a:8b:9f:2c:8d:e0:f2:2e:
                    97:33:56:97:ce:d9:0d:0c:c5:a7:3b:be:64:ec:83:
                    a2:80:58:e3:e9:08:df:a4:cf:8b:a1:bf:3c:c5:df:
                    9a:a7:fb:79:e8:ef:37:c7:fb:51:36:97:ea:f6:55:
                    49:e0:98:56:03:95:9e:78:bd:00:dc:5f:f1:dc:02:
                    b9:74:a6:2b:e6:1b:bd:30:9b:17:aa:5d:4e:96:64:
                    85:2c:2d:e1:a2:ee:f2:c4:94:91:94:26:0e:be:34:
                    98:24:9f:de:fe:8a:62:45:17:5b:50:c1:f4:8f:ba:
                    11:d2:9b:b2:41:54:5a:fe:37:d9:8a:d8:ab:34:ad:
                    69:da:cc:6c:75:f4:44:92:cf:39:6e:4b:ec:f5:00:
                    4b:91:50:8f:c3:24:22:85:74:d8:7e:05:e2:db:9b:
                    30:4b:36:e0:b0:5d:4f:94:95:93:ce:02:b8:27:b4:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:04:B4:85:D1:FA:2F:B7:E1:1A:B3:3C:E6:7E:B5:6E:E4:F1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/b8df30f2-65a6-36ab-ba53-492f52e0b416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.crl

            X509v3 Authority Key Identifier:
                keyid:A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:f5:92:f8:26:1a:40:0d:af:09:4f:27:69:40:04:ae:b8:
         77:bf:da:76:71:1b:c3:b5:8d:b5:bc:f2:0b:4d:b5:93:9e:4b:
         b4:ae:02:a2:cf:85:f7:c1:30:70:83:e5:ef:f6:d8:40:b5:90:
         2d:88:7f:28:63:d4:03:18:57:79:cd:3a:63:29:3e:30:6b:9c:
         86:58:9d:9b:81:e1:11:0f:6c:ac:33:f2:5d:ec:78:ff:69:1f:
         9e:2d:6b:89:3f:94:4b:34:18:36:7b:d8:dd:0f:4a:15:e9:e6:
         f6:b0:1c:44:a7:3a:61:71:f1:e2:7b:17:c7:a1:cc:b4:1d:d8:
         b5:6c:84:3d:d9:13:fd:96:37:60:b7:7b:c9:d3:a0:18:ee:17:
         f6:d9:39:32:ee:0e:55:79:a8:24:77:7e:c2:32:6d:38:b7:26:
         73:45:8b:ec:aa:46:ba:d5:0d:4e:fb:f4:3d:2f:a0:59:52:19:
         44:87:77:e6:45:bb:4d:85:0f:f2:ad:f9:47:cf:0f:e2:f4:dc:
         30:2b:9b:85:ea:76:27:c8:5b:f2:5b:5a:06:8f:0a:2a:d4:db:
         37:eb:e6:63:08:ab:57:09:fd:16:62:0d:0d:67:e9:23:2c:b8:
         f0:b9:18:0c:8c:3e:a1:d0:f7:42:31:95:50:0f:99:1f:5b:01:
         27:d4:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:46 2025 by rpki-client