Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa
File:                     1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa (raw, json)
Hash identifier:          5CmM4Hw+p73EdtYC3+lCEjMxeUHmCz3rrAWTV2r0LeY=
Subject key identifier:   4E:98:EE:58:55:CC:BD:33:D6:A3:A3:D5:16:0D:D7:FF:24:FA:BA:01
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F43285848CC7B9B5AA1DCD483D1B50500
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     398986
IP address blocks:        155.254.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9b:5a:a1:dc:d4:83:d1:b5:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=646f058c-d719-4ac7-8e80-9ed1fd229de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:11:42:3f:30:f4:88:ce:e1:16:08:b0:58:
                    4e:b1:2e:11:11:47:27:29:ee:f4:31:ba:0d:7b:12:
                    5f:cc:d0:af:72:de:e5:aa:9c:b7:c2:a1:27:d1:7f:
                    f4:46:65:f0:79:c7:30:53:68:6c:b6:c1:d2:96:2d:
                    36:fd:e4:46:79:ae:59:93:dc:b6:73:36:4e:41:a5:
                    11:62:77:3a:20:44:8d:58:43:76:1a:86:72:d1:fd:
                    09:cb:2d:b1:35:37:24:b9:55:6a:9a:af:81:20:8d:
                    00:51:d6:96:d4:b3:5a:21:c2:96:48:69:c8:08:8f:
                    70:1f:e4:1e:f0:97:7e:76:86:a5:f7:ca:09:83:30:
                    a6:27:ec:c4:da:9e:ec:dd:4f:aa:c0:e2:13:ad:0c:
                    e7:e7:90:58:c0:1d:a5:52:85:34:46:60:9a:59:af:
                    8c:e1:c5:5c:ac:f7:d9:be:ed:42:1d:97:70:bb:dd:
                    65:68:4f:5f:10:4c:e3:58:e8:2c:f7:29:dc:48:bb:
                    70:98:37:17:ab:59:03:dc:2c:9d:88:60:6b:d9:44:
                    7d:33:0f:91:7c:aa:37:46:c8:18:01:b1:69:fe:a1:
                    af:14:f1:b2:cc:18:a3:34:85:58:b4:d4:61:55:cc:
                    c9:2f:6d:02:09:2b:8f:ed:00:53:1c:16:23:7a:08:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:98:EE:58:55:CC:BD:33:D6:A3:A3:D5:16:0D:D7:FF:24:FA:BA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:99:da:02:8f:dc:2d:26:92:05:cd:4e:e6:14:0c:bf:17:92:
         72:9c:10:5c:29:b6:77:ad:48:28:26:f1:4a:dd:1d:ff:bd:54:
         a2:45:9b:a9:07:b1:e2:ed:32:76:0e:13:18:d7:81:4c:7c:eb:
         a1:30:68:2d:6a:4c:62:df:b6:55:77:a0:2e:78:65:82:73:dc:
         af:c2:e2:05:c8:3d:26:85:75:f1:dc:c1:4a:38:a8:48:b2:e0:
         b6:e8:01:ff:04:21:24:72:ea:c6:d7:0f:6d:53:ac:09:3b:6f:
         bb:0b:b2:10:38:35:22:90:57:64:6c:07:15:62:d3:af:57:8c:
         73:7e:1a:1e:01:0e:dc:09:32:1f:05:5f:b7:2f:1b:06:83:e0:
         f8:8c:16:e3:fc:95:a4:29:f9:2f:d1:10:16:f6:e6:8c:e3:7f:
         2f:0a:ef:f9:05:bb:19:8b:cb:8c:78:85:5b:c5:97:72:6b:70:
         22:ae:44:59:60:35:db:12:b6:44:ca:1d:29:cd:d3:09:48:e7:
         c6:7e:4d:44:b5:d9:1c:a8:a6:6b:0c:5a:c6:a5:c1:62:d7:9e:
         e6:03:8d:39:40:60:1d:9e:b6:73:58:f0:14:3e:fc:d7:68:57:
         53:65:f4:19:e0:c2:d7:ef:d5:37:2f:f4:3d:0c:76:ef:3a:fc:
         ce:49:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:26:27 2025 by rpki-client