Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
File:                     d9a535df-85dc-3aef-a8ba-25df7920f550.roa (raw, json)
Hash identifier:          c7P7+pGVva/XiieSpYwNreYwxSdOnbMDDadHDJcmTGU=
Subject key identifier:   77:DF:C7:DA:C9:96:51:09:D1:8A:35:C8:43:AA:40:14:02:3D:CF:F9
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F43285848CC7B892C22D8E1E55BA26880
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:89:2c:22:d8:e1:e5:5b:a2:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=39152d1d-35c1-4361-8d5d-00d32e6e4c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:7e:c0:bf:a2:b2:e0:9d:6c:00:94:50:b9:
                    7d:e0:ae:13:fd:82:89:aa:55:60:b9:a3:05:d7:d0:
                    25:33:70:9e:55:8e:9c:71:8d:1c:d6:a5:33:05:ed:
                    24:e1:8a:de:f1:91:5d:2c:6b:2b:ed:11:e3:4f:dd:
                    83:a6:a9:0d:f9:3a:85:d8:f6:e5:57:87:47:89:76:
                    67:49:fb:84:20:e1:38:7e:85:82:b3:73:05:54:93:
                    87:2c:ab:a6:47:0b:86:4b:94:d3:60:f7:be:15:ec:
                    88:4d:ea:7f:c7:48:06:34:01:d9:92:9b:ee:e3:f0:
                    82:2f:af:bd:77:24:66:df:b5:17:91:9b:21:63:05:
                    da:74:6b:3d:62:f0:bb:60:06:15:00:b9:12:ae:d5:
                    54:4c:4e:a9:7c:bd:a7:3a:40:4a:e4:96:c3:7b:9c:
                    d9:b7:ea:0d:df:7c:8a:8d:4a:e0:07:23:67:61:97:
                    65:7c:4d:28:66:53:e6:e2:98:d2:44:8c:25:6b:14:
                    ad:bb:6d:f3:01:64:48:ef:3f:3a:87:2c:d6:f8:21:
                    c0:6d:03:9c:01:85:e1:78:fc:ff:b8:a6:82:a4:f1:
                    9d:cf:0b:44:8f:a7:df:e5:b4:5e:62:c2:72:7d:cc:
                    81:f1:1e:c9:5e:17:c8:10:4f:9a:85:ee:bc:5e:ee:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:C7:DA:C9:96:51:09:D1:8A:35:C8:43:AA:40:14:02:3D:CF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:3a:ff:89:55:76:19:68:58:8d:12:f9:0e:90:95:24:01:
         53:49:e3:7d:f5:ee:48:36:db:df:b9:9f:9c:fb:40:4e:f3:56:
         d7:7d:85:cd:62:f9:8c:28:e7:eb:a8:cf:8b:fb:f5:93:47:b6:
         4a:e5:60:a0:2b:6a:27:23:e5:f7:01:53:a9:0d:47:00:f6:8a:
         d7:86:7b:4f:fc:1b:41:f6:ad:d5:be:1f:a8:9f:c2:3a:86:d2:
         35:71:6b:7c:52:6c:bd:5f:9d:03:29:e2:2c:db:7b:9a:84:f8:
         44:5f:9e:47:af:ad:53:64:c0:cb:37:cc:27:77:28:f8:c3:26:
         0a:e1:b3:e3:c0:a6:c1:19:a0:8a:46:fc:3b:90:59:b4:b5:92:
         85:fb:d5:cb:3f:b9:37:b3:bb:24:ff:ec:a9:65:95:92:c4:c7:
         dc:9f:36:e7:8c:99:ab:c4:dd:3a:fe:d7:ce:fd:e4:8f:d6:2a:
         d4:38:ef:89:f1:c1:c6:bf:86:0f:f9:c4:62:5a:5d:07:ca:d2:
         6a:e1:d6:e0:07:f2:a5:b7:a5:14:5f:46:0b:a4:ad:9a:71:36:
         6a:7d:b0:bd:05:16:d2:e3:d9:a2:e7:55:45:60:bc:a9:dc:58:
         2c:66:5e:98:8f:b7:c9:a2:a6:cc:80:ec:05:93:68:aa:4b:0d:
         38:ff:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:14 2025 by rpki-client