Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
File:                     e31456f1-214e-30d0-9c8f-f3fa76292a27.roa (raw, json)
Hash identifier:          erZAwk8EdFo4TwP4lYys0asr6i6FHN30TY+Ekw5dlp8=
Subject key identifier:   CA:04:AB:E8:61:90:65:9F:76:3B:98:57:46:4A:1A:F0:57:CB:6E:A2
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858490CB16EDBD8A7CC2EBD123F80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     30456
IP address blocks:        141.195.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6e:db:d8:a7:cc:2e:bd:12:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=53d81267-0595-4c07-bf60-1b1cf64b3614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:bc:38:83:5f:7e:cd:f6:35:88:71:21:db:
                    17:b9:3c:cf:4e:38:dc:9b:c8:3b:d3:ad:56:f4:e0:
                    46:e5:63:cd:21:f4:a9:00:00:57:e2:79:12:ae:4a:
                    d2:0e:02:d3:3b:3f:fa:b7:d4:73:0a:c6:0b:05:20:
                    a3:8d:27:2e:c2:7e:dd:d7:fc:ed:32:3c:49:3d:99:
                    4f:c3:23:25:c2:7b:2e:b2:97:d7:ec:c0:16:cd:fc:
                    da:3f:24:bf:1c:92:6c:84:b3:33:01:0b:40:38:37:
                    61:57:ad:8f:d3:92:61:d9:80:2e:c7:45:08:b2:dc:
                    33:12:a8:ba:06:aa:5f:a8:61:9e:7d:22:4b:c5:87:
                    26:e0:d9:fc:d8:0a:c4:33:15:cc:99:9b:c7:c4:d0:
                    4d:7d:fe:4f:47:8d:67:b1:f0:5f:a5:a1:90:a0:e8:
                    d7:6c:5e:dd:78:1f:75:0b:55:90:99:8a:a2:f4:b1:
                    d4:ff:0e:f5:a7:90:52:f9:01:90:64:94:5b:6a:c7:
                    49:69:24:5b:7e:ae:9e:90:8e:e7:32:f8:d4:23:6a:
                    de:66:d3:38:8b:35:3f:61:01:fa:22:c8:a8:aa:8d:
                    5a:6a:a6:34:0f:54:da:2d:c1:a2:60:19:df:aa:40:
                    7a:9a:bf:a0:f7:62:14:47:12:fa:23:90:85:a8:5f:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:AB:E8:61:90:65:9F:76:3B:98:57:46:4A:1A:F0:57:CB:6E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:a2:07:87:4e:37:e8:bf:8b:7e:f6:fd:d7:a0:2a:43:a9:
         14:76:35:80:de:89:16:01:80:e0:3d:9c:37:3c:88:7c:e7:bc:
         a1:aa:24:c2:59:02:cc:36:a7:a9:7f:4d:7f:8d:77:f4:9a:c3:
         a0:01:11:9d:c1:70:82:92:e3:df:5b:b9:27:ce:fc:82:8c:38:
         5a:e3:a3:5a:4e:fa:ee:42:f9:36:9b:64:fa:57:56:5d:79:e0:
         42:16:17:23:dc:ac:8a:e3:41:3b:9f:88:fe:a2:e1:e5:46:46:
         5c:ae:5f:38:4b:52:02:ed:32:72:12:ae:f4:b6:7b:68:05:71:
         fc:4b:ea:9d:36:03:2d:65:b9:69:2b:11:30:0e:4d:63:32:d1:
         bb:09:4d:c9:2e:9c:f5:6c:91:72:60:19:9f:2e:e9:17:f0:42:
         b3:13:2a:3f:b3:15:55:04:8d:0b:6f:f5:c3:be:60:c0:01:94:
         b4:07:20:f9:ee:cd:55:4b:81:b6:9e:14:0f:f0:cd:ec:1d:40:
         6e:ca:d9:7e:bb:5e:d2:2a:06:87:f5:50:e7:9e:01:9e:1d:6e:
         4e:a1:86:5a:0d:a5:48:3b:c1:18:fc:b3:a8:bd:37:07:71:6f:
         6d:37:5b:ac:3d:a7:48:df:d2:44:0f:44:e5:a9:d6:c8:ec:2f:
         92:bf:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:51 2025 by rpki-client