Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503383d4-5a01-3b31-a807-e29382e5cc5a.roa
File:                     503383d4-5a01-3b31-a807-e29382e5cc5a.roa (raw, json)
Hash identifier:          GdGyHnsBGG1Xy9evk2GZMeRi/zvJGEWk5OgJYZ32vlc=
Subject key identifier:   B9:46:CB:CB:66:65:9E:E4:EC:C1:C4:85:85:A6:5E:03:EE:DE:7E:75
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858482106C75478A55FB9CC648880
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503383d4-5a01-3b31-a807-e29382e5cc5a.roa
Signing time:             Sat 07 Dec 2024 16:02:13 +0000
ROA not before:           Sat 07 Dec 2024 16:02:13 +0000
ROA not after:            Fri 07 Mar 2025 16:02:13 +0000
asID:                     834
IP address blocks:        103.54.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:21:06:c7:54:78:a5:5f:b9:cc:64:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec  7 16:02:13 2024 GMT
            Not After : Mar  7 16:02:13 2025 GMT
        Subject: CN=83421db2-bf4e-4993-879e-67a7f8def792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:da:3e:55:54:0a:c6:9b:73:c8:78:d7:bb:
                    20:d7:5d:33:3a:83:8b:26:b4:d0:ed:b7:52:cf:07:
                    53:c9:4b:c1:4b:f9:a9:99:30:51:4f:64:3b:75:d1:
                    df:42:27:c0:03:87:c3:0f:17:05:ef:6c:c7:ab:50:
                    c2:7c:29:b9:9d:53:56:23:57:7a:97:ce:f7:0e:a2:
                    25:8e:c5:7f:f4:b7:31:3c:9a:15:2a:2c:15:e9:26:
                    22:2d:da:9a:6d:dd:47:85:96:40:97:b6:ac:3a:06:
                    81:99:bf:2f:47:d0:5d:78:86:76:29:af:8d:70:40:
                    8c:86:55:87:2c:5f:5e:2c:61:ca:4f:b0:f9:c9:cb:
                    7b:3b:80:60:c0:c2:b0:41:aa:73:b7:59:c0:04:80:
                    9b:d3:c3:df:e7:a9:89:b0:f7:c2:40:15:93:ac:57:
                    d4:55:9c:49:a2:98:a8:d3:7d:45:20:52:b4:7a:fd:
                    dc:be:ea:88:c5:21:a4:69:ef:ba:5a:32:55:c4:26:
                    9d:32:ff:b6:c6:62:58:26:c0:ec:69:0a:6e:21:8b:
                    87:6c:30:66:ae:a7:87:06:fd:16:c6:56:25:86:f9:
                    b3:a3:94:a5:ef:1d:59:15:58:46:34:48:aa:26:57:
                    ac:d2:a4:71:a4:3d:93:92:92:07:5a:74:4c:3b:d8:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:CB:CB:66:65:9E:E4:EC:C1:C4:85:85:A6:5E:03:EE:DE:7E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503383d4-5a01-3b31-a807-e29382e5cc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:79:38:93:fe:f1:9c:9f:34:c3:86:96:59:27:eb:11:10:f1:
         3c:45:b6:4c:ac:79:01:35:66:4c:7c:08:fe:f9:26:ff:67:1e:
         5f:e1:bb:28:22:ea:c3:0f:80:dc:a4:5a:ec:d5:84:ae:73:03:
         fa:70:76:c5:06:5a:8c:b1:52:d1:2b:80:50:75:f0:d5:dd:29:
         0e:be:11:0b:ed:d2:d7:1b:fa:f7:81:c0:e2:47:f2:94:70:0e:
         5f:a6:78:9c:47:f7:65:50:84:03:e4:ee:aa:94:24:b8:84:51:
         7f:8b:29:24:78:38:54:89:30:c1:b5:6c:fa:aa:3a:0e:fd:83:
         08:df:96:81:f3:91:1e:e9:da:a8:fa:ee:c6:76:78:22:d6:f2:
         84:8b:6f:fb:c9:8f:4f:2d:42:8a:5b:bb:5a:80:ca:00:73:ba:
         72:10:2b:06:2e:c6:df:01:75:bc:bf:60:0a:04:f1:c6:2c:53:
         15:ec:39:8b:d2:84:d8:82:9f:9c:8d:0b:9a:ff:49:03:aa:8b:
         a7:f4:ef:1d:ec:93:1b:e1:a1:99:b3:80:d7:46:84:69:a8:c1:
         c9:88:26:19:17:38:7e:76:7e:c0:ff:d8:03:6b:e2:83:70:11:
         db:e9:ac:fb:58:3c:de:27:93:98:c0:08:80:5e:b5:92:5e:0e:
         b2:b7:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:57 2025 by rpki-client