Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e871bb4-7a19-33de-bdbf-8a65f3f57d7c.roa
File:                     6e871bb4-7a19-33de-bdbf-8a65f3f57d7c.roa (raw, json)
Hash identifier:          YNn4VKIOPF0hC0RKQY9ImB8/zyMyqbs88iUP9naAXP0=
Subject key identifier:   62:F3:13:7D:01:B6:7E:4B:15:14:A5:CF:A5:0C:0E:AC:3E:CC:38:D0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584950F96881BBA2E9427737CF00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e871bb4-7a19-33de-bdbf-8a65f3f57d7c.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     397630
IP address blocks:        142.147.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:68:81:bb:a2:e9:42:77:37:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=9e7ca2f2-a67d-4d23-9bef-f345eace581d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e8:63:a1:60:81:3f:0c:ff:20:df:f6:4d:22:
                    c4:d0:fd:21:7e:f3:e8:21:3a:44:71:26:a6:21:01:
                    c7:76:eb:bd:a4:fd:59:52:e9:28:d8:f2:70:71:3d:
                    24:cd:04:62:b6:9c:f7:94:24:49:94:c1:70:c2:d2:
                    ae:5e:3b:e3:a3:91:e2:da:68:5b:38:fc:85:b3:80:
                    9d:fe:47:16:53:aa:f4:ff:03:c3:49:9b:1c:00:4c:
                    6e:6b:71:02:34:74:4a:30:a7:35:71:fa:78:a2:45:
                    c7:ef:f7:d0:0d:c9:ba:06:d6:4a:69:6b:73:ba:3f:
                    58:81:28:c9:e3:9f:d9:75:03:75:9e:84:80:b5:35:
                    70:97:2c:a6:31:56:66:16:66:1c:62:1f:e4:a7:4f:
                    da:5a:cf:c7:7f:e7:b8:74:40:b2:dc:a2:cc:af:39:
                    11:6a:9f:04:77:d6:ac:47:ab:86:86:5b:15:96:90:
                    ec:c6:8d:18:bd:37:34:a1:1e:69:7d:b2:7f:1a:65:
                    e0:3a:d4:49:50:74:0f:e2:04:a1:d2:76:15:54:39:
                    9c:0e:dc:c3:3e:cb:e4:66:6f:7b:e4:a2:55:ca:ce:
                    a6:bc:84:e7:21:5e:dd:d9:53:cc:44:05:da:c8:b6:
                    8b:a2:44:23:bf:f4:88:32:1c:e5:fd:f8:2d:d1:18:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:13:7D:01:B6:7E:4B:15:14:A5:CF:A5:0C:0E:AC:3E:CC:38:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e871bb4-7a19-33de-bdbf-8a65f3f57d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:d0:e0:da:d8:7a:0d:3d:5c:12:93:d1:cf:25:ab:6a:1d:ab:
         4b:f3:9b:cb:57:c1:fa:24:72:4e:ff:99:8b:ff:fc:0b:9e:7a:
         24:8f:4c:10:e4:38:bb:d8:6f:c5:1d:04:22:cf:de:80:36:4b:
         33:1a:86:a8:79:66:3d:66:57:c2:e2:6e:d4:1d:6d:f6:a0:91:
         81:cb:3b:b2:aa:db:7b:5d:be:f7:e8:44:4f:27:ee:70:63:28:
         88:2d:39:74:20:9e:65:6d:44:a1:f6:37:27:93:bb:6f:56:d2:
         e9:fe:41:f3:4d:69:15:7d:0b:17:11:4b:d0:9a:85:74:7a:aa:
         7a:e8:fe:ad:cd:97:f4:53:1a:57:8c:88:d4:bc:de:24:5f:f4:
         38:b8:0f:62:a0:14:8b:52:74:d7:58:ad:a3:90:15:47:84:91:
         95:a3:fd:97:55:34:8d:72:7e:bb:73:82:74:a7:97:9b:55:91:
         3c:db:60:21:87:ad:bf:9e:5a:9e:7e:34:10:21:df:4e:58:29:
         8c:45:74:da:81:a7:32:22:51:37:cf:f0:68:e3:16:1f:63:5d:
         2b:9b:15:fb:57:ec:a3:38:b3:08:4c:8a:33:0e:83:1f:3a:ba:
         87:eb:f2:f4:e9:58:83:10:51:ef:45:2e:d4:73:80:66:4e:b1:
         4c:43:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:56:55 2025 by rpki-client