Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
File:                     9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa (raw, json)
Hash identifier:          9FpADz6jJgtAdPmwgNlSoYU6EaTEmo+spTJ7zbOqcUg=
Subject key identifier:   E3:D7:71:49:99:B7:2C:74:87:D5:28:71:61:14:8D:00:08:E0:AC:31
Certificate issuer:       /CN=3905609c-39ed-4063-a3a8-68871c079747
Certificate serial:       010D0C9F432858494B64144801FD7316A205DD80
Authority key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        216.245.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:14:48:01:fd:73:16:a2:05:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905609c-39ed-4063-a3a8-68871c079747
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=f9131e2c-c7f9-415f-adf7-06a411985fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:a0:7f:51:88:67:a1:cb:f3:61:6b:72:71:
                    61:78:f9:63:95:d0:e6:0b:72:29:28:4f:75:0c:c2:
                    ef:e1:0f:33:3d:29:f9:8c:84:cb:12:ce:03:3d:7e:
                    50:58:9e:36:9c:bb:26:46:fb:b0:78:02:b7:a7:5d:
                    26:8d:d0:e4:d9:85:d9:74:de:d4:41:95:51:7b:00:
                    38:bf:fc:76:38:03:ff:df:8b:ce:35:5a:76:ca:36:
                    e3:a8:5f:3d:a3:33:15:a4:07:c1:4c:ed:de:7d:7e:
                    f9:4f:66:f3:a0:14:83:ac:81:7e:e8:78:70:7d:e6:
                    84:9d:5a:54:9d:36:65:e7:f3:ae:67:17:d1:20:63:
                    c6:9d:42:e8:55:24:d3:8d:e4:e8:98:3c:8f:87:d2:
                    52:87:69:cf:4a:7e:1e:a2:a0:f0:71:14:d1:66:c8:
                    67:eb:e2:2d:df:d9:44:bb:41:68:aa:c8:ba:d7:5e:
                    cb:28:f4:53:39:56:23:d6:c0:b3:ab:ec:f2:0e:af:
                    7b:04:0e:5b:99:0f:13:c6:14:79:31:ad:ca:ef:55:
                    da:21:a0:95:6c:fc:1a:1d:7d:65:ed:a7:20:30:24:
                    60:c3:69:63:b3:13:b7:80:82:55:08:19:fa:07:95:
                    7e:57:d9:be:88:a6:ba:1a:80:68:54:22:71:02:96:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:71:49:99:B7:2C:74:87:D5:28:71:61:14:8D:00:08:E0:AC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl

            X509v3 Authority Key Identifier:
                keyid:BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:16:0f:49:2d:ac:54:39:1c:6e:c3:32:1a:2f:78:7e:7f:a4:
         03:e4:fd:f5:06:da:4d:fb:fa:de:58:b8:bf:a3:b8:80:ef:86:
         bc:0e:ab:c3:4a:24:8b:51:56:06:3f:63:ee:fd:8b:a5:d5:5e:
         c5:10:0e:17:7b:b1:2f:a3:05:67:df:85:a4:60:2b:36:40:a7:
         25:0b:04:bc:16:cb:88:4a:6d:52:dc:60:50:57:0a:84:dd:c7:
         8f:af:38:1f:11:0d:9c:05:2b:6e:e2:73:8a:af:44:9b:92:66:
         a8:da:3c:37:a4:c9:e0:26:24:5a:21:53:ab:c7:36:4f:dd:10:
         ea:43:7e:c1:17:6b:48:19:d7:5d:6e:3b:a4:fc:a0:23:95:01:
         4e:6d:98:cf:e3:76:52:44:4b:9f:9f:71:16:32:3c:6b:97:5e:
         d5:b5:65:14:b8:04:d3:1b:6c:7f:64:ee:19:1d:9b:11:fb:e5:
         3f:95:10:e0:be:dc:e9:ef:16:f1:67:7e:6b:a1:06:6c:02:20:
         93:d9:32:a8:2b:11:3c:23:55:93:5d:3a:ff:6b:65:9f:3e:8c:
         79:64:4b:df:08:c9:38:f6:b5:a1:3a:73:e7:61:64:0e:f5:a0:
         ea:f9:c6:76:b5:bb:a5:2c:9c:8a:9e:0a:9c:af:95:24:ab:17:
         a5:7b:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:56 2025 by rpki-client