Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/866f46da-1e6f-3938-b662-b3073f2bd9b5.roa
File:                     866f46da-1e6f-3938-b662-b3073f2bd9b5.roa (raw, json)
Hash identifier:          lRphH3nZzW9j7/IUVFBOFYWdd+K/l4p7LRCn37khhI8=
Subject key identifier:   69:32:32:40:0F:3C:52:3A:6B:F0:3B:D8:CA:4D:91:B8:80:3B:9A:35
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AFBB4BD17239D6289D86CA40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/866f46da-1e6f-3938-b662-b3073f2bd9b5.roa
Signing time:             Mon 27 Jan 2025 18:50:44 +0000
ROA not before:           Mon 27 Jan 2025 18:50:44 +0000
ROA not after:            Sun 27 Apr 2025 17:50:44 +0000
asID:                     15164
IP address blocks:        173.244.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:bb:4b:d1:72:39:d6:28:9d:86:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 18:50:44 2025 GMT
            Not After : Apr 27 17:50:44 2025 GMT
        Subject: CN=a6a11812-fbf7-4bfe-855b-bcb34aa5e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:b9:4f:2a:c5:26:c7:e6:b3:5c:26:89:35:
                    67:24:9b:68:be:33:34:89:41:46:dd:78:d1:4e:e2:
                    1e:55:31:98:01:e5:73:d4:a5:b2:94:d6:5b:d3:6f:
                    c2:66:8b:31:c0:79:90:9e:c4:a3:6b:8c:22:0a:cd:
                    82:5e:63:38:6a:f5:9f:1c:40:da:25:18:39:15:d8:
                    e8:4e:ba:19:67:0d:3f:23:6c:5d:9f:f0:25:9c:e4:
                    06:b5:37:cb:af:f8:3a:ef:2b:22:0a:33:ba:a7:24:
                    82:9f:60:6a:22:7d:ff:14:99:7e:df:ce:37:a1:7e:
                    e4:4a:1e:a5:74:0d:eb:30:36:ba:e8:4b:09:93:68:
                    aa:da:ef:63:6a:f1:29:a6:ea:a2:b2:ca:cd:23:9c:
                    5c:63:b0:55:6c:52:40:22:0b:b1:db:22:e4:c0:08:
                    89:82:ea:20:18:1f:eb:87:3c:a8:ab:a4:c1:9e:05:
                    0e:9f:75:09:1e:60:b0:41:26:5e:1c:43:72:50:e0:
                    6f:6b:0b:c6:e3:a4:51:22:db:fd:5e:b5:fc:23:e4:
                    41:ba:ab:65:fd:67:61:fb:79:b9:76:c5:e6:ed:1c:
                    54:f9:dc:3b:9a:25:b8:ce:22:61:34:9d:63:6e:d1:
                    a6:83:5f:f0:22:fc:bb:44:88:1b:b4:aa:02:bb:12:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:32:32:40:0F:3C:52:3A:6B:F0:3B:D8:CA:4D:91:B8:80:3B:9A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/866f46da-1e6f-3938-b662-b3073f2bd9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:84:e6:97:26:3f:e0:8c:7c:26:a2:98:db:a9:e2:13:90:
         54:71:fa:18:4f:b1:21:cd:6c:b8:31:7e:c5:af:10:94:f5:b2:
         aa:f1:0f:69:8b:08:59:55:62:f9:d4:d4:8d:de:35:15:29:f1:
         b1:52:8c:94:d0:1c:e8:87:5c:b7:b0:04:3a:db:43:1c:a7:4c:
         3a:91:3e:60:46:68:d2:fc:11:3e:30:ee:87:d7:fd:41:27:fb:
         d3:75:3f:91:0c:12:91:b7:f8:58:51:36:e5:5a:9e:1f:49:d3:
         ad:66:43:f9:7e:7c:13:ef:2c:3f:6e:93:1c:fd:4d:ef:a6:4c:
         00:b4:09:fe:2d:a2:8a:90:55:4a:60:a6:3c:ab:68:76:62:b1:
         9b:6e:67:2a:38:39:9a:89:06:a2:af:dc:d1:5c:22:93:a9:30:
         6e:ef:bb:32:83:b7:3e:c5:b0:78:2e:2e:72:65:62:a8:de:c8:
         2d:1e:df:2e:e6:f2:5f:9f:51:b8:ca:84:d1:46:cc:96:59:05:
         5f:6a:72:1e:34:73:58:7d:19:ea:b5:a7:76:bc:02:b0:7b:8e:
         6b:b8:c7:2b:42:c3:28:b2:9b:68:92:4f:8a:80:38:4b:a6:c4:
         a1:32:39:c7:05:4e:03:66:8f:a0:45:86:e0:df:87:1d:1f:79:
         90:70:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:29 2025 by rpki-client