Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
File:                     141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa (raw, json)
Hash identifier:          yPp/BGWDVapVM7NHdLCIE0rSsyIW9ZWPlnOSN87bkDk=
Subject key identifier:   0B:84:70:12:83:CB:0F:B5:A7:22:31:CF:E4:DA:51:2C:20:B7:13:E2
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858494CC93B6431136043552C5500
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     21859
IP address blocks:        128.1.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:3b:64:31:13:60:43:55:2c:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=9ea08d76-ab64-4d2c-9557-58beb79a9118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:51:9a:39:d5:c2:bb:a9:4c:4e:b0:e2:b7:
                    0b:66:18:3e:70:25:72:be:5e:b3:80:26:42:f5:a4:
                    eb:63:b2:1f:f8:de:6d:a9:fb:a7:fb:2c:c7:db:a3:
                    9a:1f:87:fb:b9:71:62:bc:e0:af:8d:16:ba:53:46:
                    be:41:07:32:47:73:be:7f:0c:40:bc:3b:7e:b8:62:
                    33:bd:57:a7:e3:6b:3a:a5:2d:45:da:1c:bf:6a:c1:
                    0a:04:a9:0f:0e:b5:69:48:45:ed:94:4e:e8:a1:39:
                    06:78:24:39:14:e7:0e:a4:07:51:60:9d:ee:94:45:
                    5c:d4:e9:43:6a:9a:d4:da:e1:54:ed:3d:94:33:e5:
                    2b:ba:30:ee:9d:37:6d:df:bc:1e:26:20:2b:86:de:
                    99:d7:83:bf:48:b6:45:b8:7f:7b:94:ef:a9:eb:e7:
                    9f:ba:30:b9:80:01:f4:ac:20:1e:99:7f:d5:fe:8b:
                    92:5f:47:f5:73:76:09:4e:ef:64:f2:f9:98:b7:d9:
                    ec:64:e9:71:5f:f4:92:38:e9:39:45:f3:89:39:54:
                    35:98:00:92:b6:11:df:70:36:5b:17:d6:9e:80:50:
                    30:03:13:91:84:f0:e2:fa:6b:9c:28:6e:61:91:b1:
                    05:de:3e:45:42:57:c4:0b:4c:14:22:6f:27:90:d6:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:70:12:83:CB:0F:B5:A7:22:31:CF:E4:DA:51:2C:20:B7:13:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:4f:ee:a4:ab:fb:f7:d2:3e:a2:4f:7d:3f:9a:c5:52:1a:
         73:b3:8a:a1:7c:fe:5f:d4:ae:ad:6b:be:fd:83:51:fe:d5:60:
         24:dc:39:3d:00:43:bb:03:5e:cc:9c:4d:3b:c2:7e:c2:1d:79:
         e3:bf:c9:54:c2:24:e3:45:1a:75:b9:de:78:67:a3:09:20:96:
         fc:60:66:03:c1:98:eb:b2:10:7b:fb:97:4d:a4:f8:85:f5:d5:
         05:24:9d:c4:b2:2e:a9:a8:96:41:af:84:31:a9:c8:13:70:e0:
         13:7e:b9:50:7d:8d:ef:e1:c7:14:4c:71:6d:e6:21:5b:9a:7f:
         f5:21:4f:b9:ad:6d:87:bb:74:8e:d6:06:9e:6c:76:1e:d3:29:
         a0:c7:15:35:85:3e:09:14:c4:71:06:8d:8d:e7:d8:3a:78:e8:
         cc:8e:8d:5c:50:14:62:b1:98:f7:62:f0:ab:4d:73:56:1b:2d:
         55:b3:47:61:0d:af:4d:02:2c:50:c6:7a:8c:9c:44:45:a9:96:
         ec:20:93:b7:4a:30:dc:ff:a3:ff:c6:44:7f:c2:f9:2a:62:54:
         d8:de:ff:cc:03:46:e1:c9:2c:4d:1a:0c:cc:eb:a9:19:03:f8:
         11:a0:bf:cc:67:b1:1b:0b:50:9d:c0:44:14:f1:40:c9:c6:10:
         3f:9b:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:15 2025 by rpki-client