Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
File:                     c726776b-2349-36af-bfe5-8f8145fc0129.roa (raw, json)
Hash identifier:          VXCRuR3uIm6TvIxMO7+3QvGq86stIPfREtEensQjD4E=
Subject key identifier:   D7:D4:AA:89:2D:66:0A:9E:8D:59:84:1A:51:F7:3A:30:5A:EE:78:80
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F43285849203C17F18F958178D1547580
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     6334
IP address blocks:        151.193.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:17:f1:8f:95:81:78:d1:54:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=dee963a8-8014-4c2e-8f87-f934437bf10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:c6:4b:ad:25:c1:0f:f9:26:18:c9:3a:2c:
                    d0:04:36:31:1e:da:b4:40:c1:ce:82:2b:50:9c:5b:
                    80:9a:6c:bd:99:d9:5a:8d:54:97:42:e2:23:a0:9b:
                    db:e7:e6:eb:6b:07:a8:a0:cb:91:ed:dd:b7:0c:9b:
                    10:a5:0e:15:37:c3:ce:7b:8f:80:8c:b3:49:24:06:
                    f1:0f:dd:34:c9:ef:70:ef:28:b5:7c:b9:c8:3d:ee:
                    00:52:76:1c:75:98:e0:e3:e1:50:06:92:5f:7b:93:
                    03:6f:48:38:46:77:2c:8f:75:cc:09:36:8f:dd:7d:
                    2c:a6:a1:78:3d:d1:7d:2e:f5:3b:30:44:12:fc:15:
                    52:48:b6:29:0d:eb:28:c5:e5:48:45:cf:06:30:72:
                    fc:82:8f:f5:48:85:28:d3:7a:de:4a:b9:cc:38:e1:
                    38:e9:97:49:fd:1d:eb:3c:6f:1a:ad:39:97:93:56:
                    f3:ae:bc:30:8b:d4:e7:b9:b9:88:f7:af:41:a4:1b:
                    0b:8e:cf:37:3d:a1:03:67:89:59:f7:fb:a6:e2:7f:
                    03:97:f3:68:b4:21:dc:16:17:04:4c:41:2d:8e:ba:
                    6e:ed:69:f3:01:11:b3:ff:80:a6:ae:0c:c1:a0:ea:
                    25:16:f4:5e:70:4b:b4:3a:40:8f:75:4f:19:c4:09:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:AA:89:2D:66:0A:9E:8D:59:84:1A:51:F7:3A:30:5A:EE:78:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:0e:14:ee:8a:82:f5:2d:07:7c:69:3e:cb:39:17:8e:c0:
         2b:97:94:84:3d:06:5c:e7:91:72:43:b4:f6:a4:b7:23:12:26:
         1c:13:eb:6d:b1:fb:e6:61:e8:a0:91:35:0f:b0:c7:7a:5e:83:
         5b:d6:14:f9:35:48:3e:d2:0f:87:d2:3a:3e:27:06:b6:a4:60:
         02:c8:8f:cc:ea:df:ca:c4:49:24:84:cc:cf:9c:07:08:61:59:
         d2:36:f3:d2:41:68:ee:26:9e:95:29:52:2d:0e:59:de:69:d4:
         64:84:25:d4:86:b2:40:bb:b8:2d:74:60:74:1d:aa:ab:0d:48:
         26:85:54:ba:24:df:0d:d9:6e:9c:17:c3:52:25:e5:25:4d:1b:
         44:b6:d5:6d:d6:ab:0f:83:2d:cc:80:80:87:38:43:f9:91:e7:
         b7:d4:74:5b:24:df:44:d4:80:9b:48:73:3c:be:5d:5b:80:0a:
         1b:59:ba:24:ed:4e:19:12:25:40:ac:76:43:20:1d:43:3b:d1:
         71:0a:ca:b8:cb:33:4a:19:96:ce:60:da:b1:27:76:d1:8f:b5:
         47:a6:26:dd:b2:d7:cf:05:57:1e:b9:64:eb:69:35:24:ae:ab:
         e2:10:6e:6d:fa:28:27:7b:22:22:da:07:6f:53:ac:34:62:01:
         b7:6d:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:17 2025 by rpki-client