Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/2d446c21-195f-31f9-b768-56858cbb0b34.roa
File:                     2d446c21-195f-31f9-b768-56858cbb0b34.roa (raw, json)
Hash identifier:          Uk9zGTi5/iLGvh1gg9By1mCTYEIyLzZe2037Sc0iV18=
Subject key identifier:   B9:B6:91:2D:78:30:F0:C8:6E:21:4D:A2:47:B7:69:EA:81:2F:D8:64
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F43285849203C1813300235264C07BF00
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/2d446c21-195f-31f9-b768-56858cbb0b34.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     6334
IP address blocks:        151.193.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:13:30:02:35:26:4c:07:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=ab0033fa-5220-4ab5-baf8-7391ec60d355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:98:72:95:51:36:d6:a3:7d:ba:87:4e:c6:
                    79:e6:8a:52:b5:dd:5a:94:1a:05:21:8d:f0:a6:90:
                    76:bb:5f:41:d7:02:0d:f8:d5:cb:1e:f7:ea:b7:bb:
                    79:2c:39:bf:6c:53:f8:e8:a7:75:76:2c:90:14:98:
                    1a:64:af:72:eb:e4:a4:3c:ff:12:87:01:db:d4:67:
                    30:59:dc:82:6b:1c:e1:a8:c7:8e:aa:30:88:33:d2:
                    93:05:c7:84:b4:e7:23:7c:ab:a6:1d:d2:7a:8e:7d:
                    da:d6:be:8f:87:71:66:ed:33:21:8d:5d:37:6d:f8:
                    56:c6:b1:bf:44:a3:a1:35:b4:b8:1a:45:a6:63:82:
                    95:27:6d:f6:15:d5:ec:01:46:2f:1b:ed:2f:ea:36:
                    b5:1c:53:98:d0:85:da:2f:80:2f:8f:3d:85:72:7f:
                    de:ec:85:84:50:d2:52:52:0d:a4:2c:30:3a:d2:8b:
                    f2:3c:ba:df:1a:d8:2a:8c:29:f8:16:f2:64:8f:bb:
                    99:ba:84:40:04:6f:58:a8:bd:ef:96:84:f6:b5:43:
                    0c:0a:4e:63:e5:65:47:44:e0:ca:c9:ec:d2:a6:c5:
                    c0:7c:9f:9e:89:c0:6a:c9:51:6f:94:97:bf:41:f3:
                    1a:ff:38:54:ec:15:99:34:4e:aa:7b:3e:b6:21:5b:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:91:2D:78:30:F0:C8:6E:21:4D:A2:47:B7:69:EA:81:2F:D8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/2d446c21-195f-31f9-b768-56858cbb0b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:94:e3:aa:5c:47:51:ae:78:5e:ff:69:c2:7a:8b:35:12:
         bb:ce:f8:39:e6:63:7a:f8:96:4f:62:be:d6:ef:30:53:b1:f7:
         0f:8f:8a:e1:db:38:6b:c3:eb:5e:2a:c8:68:82:5e:4d:87:a6:
         57:4d:16:d2:44:f2:ae:5b:de:43:40:d0:7e:1b:47:df:44:12:
         a1:0c:87:4f:ea:fa:19:45:f2:6e:7c:62:f5:51:5f:28:63:48:
         4e:62:08:c8:4d:e0:92:fb:df:6d:20:9b:11:f1:f2:1d:08:d8:
         64:53:c5:1b:17:a6:fd:2b:b9:d3:78:99:92:fe:4a:74:e0:80:
         c1:d6:6c:07:8a:49:94:6d:12:cc:f2:c0:05:11:a1:70:e0:66:
         c1:1b:7e:ee:d8:9d:c6:c3:d8:1b:bb:c2:94:6f:81:d7:71:19:
         4e:ce:51:5a:1e:95:a1:82:0b:d8:c8:32:94:fd:18:33:5c:af:
         a1:71:95:54:e3:4a:55:99:82:b0:de:e0:94:0a:ac:09:41:8d:
         b8:39:64:ac:f6:54:f4:f8:0f:38:f7:68:d1:d6:57:e3:c2:b8:
         59:75:b5:fb:90:12:cf:73:10:bb:1a:85:e9:e4:7a:2f:8a:e2:
         99:5c:de:62:f1:dd:18:c0:d4:33:c3:85:e0:7f:7d:de:28:57:
         fa:00:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:46 2025 by rpki-client