Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa
File:                     58aeb374-4580-308b-ae98-aac0b8248fa1.roa (raw, json)
Hash identifier:          MR9xu4gAXAoZfn7YF6DMPf2Z5T7sMkK5JssP/9b2UEw=
Subject key identifier:   07:25:AD:C9:B7:2A:49:95:CD:6E:71:D8:E5:0D:2B:5D:6B:89:59:44
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584930DE789BF22FCEF28EFB8600
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        158.51.108.0/24 maxlen: 24
                          2602:fd6f:40::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:78:9b:f2:2f:ce:f2:8e:fb:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=abfdec10-9384-4634-a67d-108b31cdc700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:86:d8:da:ab:7f:ee:cf:d2:af:22:f9:ec:
                    4f:da:49:69:a3:fc:45:27:98:72:f0:18:1b:60:f5:
                    41:28:65:ed:cc:66:2b:5c:56:76:aa:8e:f3:cc:0b:
                    15:0f:34:4b:e8:cb:af:1b:a8:cf:0d:a4:9b:47:29:
                    10:95:84:f3:d2:6d:c4:a1:fc:0b:a2:7e:cd:da:cf:
                    0f:04:ce:00:85:a8:2c:03:73:0f:20:ef:70:8c:45:
                    be:ad:01:d1:ed:fc:e1:22:7a:20:1c:45:a8:97:df:
                    15:62:e6:9e:0e:fd:36:04:c2:a7:88:12:11:d4:1b:
                    ad:20:77:b4:3d:c5:48:ee:7c:79:8b:90:9b:d2:8b:
                    31:81:03:61:e8:77:22:66:47:17:8f:51:17:eb:6f:
                    30:0a:99:e3:c9:73:67:f2:66:43:d3:94:92:b0:13:
                    3c:d7:44:3b:ec:51:40:48:de:d2:83:da:98:16:60:
                    2b:74:71:ef:07:fd:06:1a:57:14:57:f1:c4:2c:2d:
                    e8:42:09:0c:7e:04:13:75:f9:20:9f:e3:89:26:6f:
                    9f:6e:c7:10:19:55:82:de:9d:e1:f8:69:19:56:95:
                    34:e3:0c:5f:00:c0:bd:b2:38:f2:11:b4:7e:ba:c2:
                    0a:21:e2:71:c7:56:4c:00:8f:30:3d:8c:93:06:f5:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:AD:C9:B7:2A:49:95:CD:6E:71:D8:E5:0D:2B:5D:6B:89:59:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24
                IPv6:
                  2602:fd6f:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:67:d8:79:c6:cd:60:89:74:71:89:35:89:62:d5:2d:5b:
         d7:86:ed:12:a1:2d:ba:08:36:fd:a4:6d:ea:6d:dc:c1:ca:5d:
         d2:99:3c:97:5a:ba:23:ca:ea:1e:6a:30:bc:fb:30:fb:d7:d6:
         00:e2:29:de:21:97:86:f9:86:73:e1:14:91:ab:3d:63:91:6e:
         9e:77:41:15:3c:ce:01:79:6a:6a:05:bd:73:ca:45:43:40:83:
         f2:a9:99:ff:a2:20:70:07:5a:12:eb:41:39:31:a8:c3:5c:14:
         15:83:86:56:18:50:7f:e3:1f:82:15:ca:c6:e6:ad:ab:7b:ab:
         53:5e:d2:c5:19:0a:4d:cb:78:9a:0d:08:2e:9a:98:0a:e7:d9:
         b1:bd:86:cc:58:b2:44:cc:4e:65:41:57:19:64:87:b5:6a:e8:
         4f:7c:db:c4:2d:b1:f2:2c:cb:1b:33:d9:95:1a:f9:8d:3c:60:
         d9:fb:65:d4:64:00:28:3c:a0:a0:9f:82:a3:e4:10:cb:d1:9c:
         ff:93:bb:5d:9d:cf:a3:03:10:a6:d5:e8:f6:f2:4b:6e:1f:72:
         e0:20:70:e4:e4:69:6b:62:c5:b1:23:ed:b4:a8:80:83:16:73:
         10:7d:4f:78:e0:fa:d1:25:75:8e:dd:94:78:cd:66:ca:80:8e:
         1c:d9:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:13 2025 by rpki-client