Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6699362e-4f1b-33f9-8c0a-2e1ae43b1d66.roa
File:                     6699362e-4f1b-33f9-8c0a-2e1ae43b1d66.roa (raw, json)
Hash identifier:          DJYsEIHJX//w9g0il7XHYjYVri+iHYeN0S/HknoRkpE=
Subject key identifier:   BC:57:B2:D9:B3:5A:F8:9C:31:FE:23:66:7F:6B:BD:E0:69:07:97:AC
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285848784737452C50A4740DABCEC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6699362e-4f1b-33f9-8c0a-2e1ae43b1d66.roa
Signing time:             Tue 07 Jan 2025 22:07:23 +0000
ROA not before:           Tue 07 Jan 2025 22:07:23 +0000
ROA not after:            Mon 07 Apr 2025 21:07:23 +0000
asID:                     203963
IP address blocks:        139.177.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:47:37:45:2c:50:a4:74:0d:ab:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jan  7 22:07:23 2025 GMT
            Not After : Apr  7 21:07:23 2025 GMT
        Subject: CN=afbcce73-7357-45d6-b694-77f61f9117a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:0a:b1:b0:b8:15:d1:fc:83:a3:f2:43:bf:
                    02:fe:a8:df:c9:33:4f:92:9b:5d:18:ca:14:6e:39:
                    d3:02:86:1d:ab:5f:3a:60:2b:d5:58:65:e1:db:05:
                    ff:5a:65:78:3a:86:ce:fa:18:28:87:93:18:0e:64:
                    be:5b:c8:a2:35:e9:23:d2:dc:4e:bb:59:37:6d:8d:
                    df:c1:84:62:6c:8d:4b:fb:29:29:f8:21:e6:95:1e:
                    e4:f6:fb:e1:ff:c8:78:20:bf:a0:f1:ec:47:bd:fd:
                    7a:12:21:8d:2a:1a:bb:5c:9d:b3:b2:97:d9:65:d6:
                    15:fb:de:11:02:69:1a:0b:5d:9f:2b:0e:57:38:94:
                    d3:51:4b:38:5b:74:2d:8d:17:ce:92:be:b3:26:c3:
                    d6:e0:ea:8c:69:78:8e:16:41:d7:66:7a:a8:ae:98:
                    fd:26:bb:55:ca:ec:cf:06:e1:06:2a:5d:01:c4:c2:
                    20:ec:cd:8f:0c:aa:64:9a:b0:3f:80:e2:a1:c3:d8:
                    37:c8:0f:dc:8f:d1:85:21:72:9a:cb:ff:40:eb:57:
                    83:79:53:ab:cd:ee:87:80:32:41:89:e1:48:1c:4f:
                    2a:c2:49:5c:d4:6c:90:9c:ad:da:df:10:5d:4a:67:
                    60:bb:54:7e:4f:d9:f5:b2:b2:1d:01:53:47:62:f0:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:B2:D9:B3:5A:F8:9C:31:FE:23:66:7F:6B:BD:E0:69:07:97:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6699362e-4f1b-33f9-8c0a-2e1ae43b1d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:bd:cc:98:2d:0e:fa:f8:3f:eb:96:d4:6f:11:9d:81:35:
         d3:d1:4e:9d:cf:bf:35:20:c3:86:d9:75:c7:02:55:e2:15:55:
         d7:ef:07:a2:1b:54:70:c2:d0:49:21:87:8a:42:1e:56:5a:6b:
         e9:7f:92:a4:91:cb:8f:b1:18:40:1a:50:2a:87:a4:bf:03:ad:
         ad:85:d7:e2:0e:07:e9:fa:49:31:8c:60:b1:34:29:67:df:e1:
         35:1a:69:7e:b5:10:3e:ca:69:f8:3a:02:4b:1c:55:dd:c0:91:
         bd:20:5f:4e:fb:ef:7b:83:e9:6c:b3:60:3d:3e:a4:34:1e:1b:
         5c:df:de:56:36:81:f2:f9:d0:6f:d0:06:32:28:62:98:d3:ee:
         02:4a:fe:f1:a0:f8:f8:60:38:c7:a0:d9:f8:19:bd:39:99:49:
         13:c0:08:a6:fb:59:60:14:9e:67:18:4d:4c:e4:22:64:dc:58:
         62:97:9f:9c:49:54:5b:d9:b1:44:f3:da:a7:47:4f:45:3d:47:
         ce:0b:b6:16:ba:f2:1c:d4:39:50:1d:cd:66:b4:3f:32:d3:10:
         16:c1:f7:29:07:7a:8f:6d:e9:45:98:7a:54:56:24:b0:63:18:
         8e:80:43:8a:75:26:d2:d5:d9:fa:3e:3f:83:82:b6:74:d6:87:
         f2:fb:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:27 2025 by rpki-client