Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/813fb99e-d9fe-3f7f-a228-cbb2864eea0f.roa
File:                     813fb99e-d9fe-3f7f-a228-cbb2864eea0f.roa (raw, json)
Hash identifier:          ONFGge5YJ8q5wM6eANOaYa8dLSIQgLSGdlC0bzhlnP8=
Subject key identifier:   17:DB:EE:73:09:D9:F7:9D:AD:BC:B5:CB:4A:DA:82:5E:E6:4C:99:C9
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F432858494E2EB3DC6D666CB46B018840
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/813fb99e-d9fe-3f7f-a228-cbb2864eea0f.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     13389
IP address blocks:        216.179.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b3:dc:6d:66:6c:b4:6b:01:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=78c021b2-05da-4e2a-8a00-4efae387d931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:fa:d8:4d:c3:59:a2:2d:0d:c1:38:59:ed:
                    b0:74:46:ca:44:96:28:66:39:18:73:7a:7e:a7:24:
                    af:f3:fb:62:4d:7a:7e:8d:51:db:9c:b1:45:52:62:
                    8c:07:c9:81:d1:4b:8a:f3:3d:93:64:2b:eb:b9:20:
                    5a:2a:8b:38:4d:40:62:15:1b:8b:8f:d0:66:7f:a7:
                    8c:4a:42:36:61:b3:fd:43:e4:94:14:75:57:65:62:
                    cf:83:dc:41:8a:b2:a0:c1:5a:42:22:7e:8e:01:db:
                    a6:93:d9:e4:5d:b9:cb:8f:87:95:a0:23:ac:d5:78:
                    8d:bf:c1:9d:a3:d2:81:a9:3d:9e:a2:71:b9:ce:ad:
                    5a:48:89:53:3e:31:ce:4f:51:7f:58:3f:1c:02:87:
                    d7:2a:ee:ab:0e:a0:7f:03:73:52:58:f3:28:24:19:
                    7a:b5:82:b2:8a:cb:09:62:f8:1d:3a:40:b0:36:0d:
                    32:14:71:46:89:3b:cc:2f:95:1c:e6:a0:c0:88:60:
                    1b:e7:ce:28:7c:d2:af:69:eb:86:35:20:b5:f2:85:
                    a4:ec:a9:6e:32:05:cf:c2:41:9a:dd:83:f5:d2:c4:
                    63:58:27:cd:7b:e6:c2:78:95:bb:40:0b:1d:cb:cb:
                    20:f3:86:e3:67:40:13:71:5f:e0:c2:4f:9e:de:4d:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:EE:73:09:D9:F7:9D:AD:BC:B5:CB:4A:DA:82:5E:E6:4C:99:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/813fb99e-d9fe-3f7f-a228-cbb2864eea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:42:98:df:a0:83:40:65:6b:6e:31:95:00:bd:f6:fc:f7:d7:
         02:b0:08:66:84:9d:da:35:99:22:ef:6c:aa:5f:63:1d:c9:ff:
         47:42:9c:2e:9f:48:8b:8f:1b:20:54:cb:75:75:09:1c:d7:e9:
         ec:0b:a2:d3:07:62:97:f1:62:94:14:5c:56:dc:67:ff:51:f5:
         ed:b1:eb:5a:02:c6:2e:bc:41:9f:3f:eb:04:a9:cd:35:d1:ca:
         39:d2:c8:0c:b6:8f:15:a2:66:80:3e:c8:0c:0f:c8:1e:81:9d:
         aa:49:01:ce:e9:93:d5:7a:3c:c1:13:37:ad:1e:d6:61:4c:80:
         14:3c:be:5d:dc:d5:47:a7:c3:23:8e:13:ef:2d:2f:95:95:12:
         a5:c0:64:da:86:14:70:3a:63:e1:a5:3c:c4:8a:9f:4b:f2:08:
         ee:c6:8b:34:ef:45:fe:45:17:f8:be:c5:61:f6:ec:fd:42:f9:
         72:16:47:0d:17:67:62:88:9c:4a:3c:02:25:9c:74:1e:26:a9:
         87:4d:da:d5:03:da:80:c2:51:72:68:8e:2b:4c:04:fc:ab:6e:
         31:b0:20:43:34:97:b0:34:ac:ee:eb:1c:a4:7c:2b:87:ba:d4:
         4e:10:8c:86:c1:61:75:38:4b:c4:a0:06:9a:25:1e:0f:30:95:
         20:85:e1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:33 2025 by rpki-client