Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/6b2ec405-d37c-3524-b38c-fa3cc924acaf.roa
File:                     6b2ec405-d37c-3524-b38c-fa3cc924acaf.roa (raw, json)
Hash identifier:          Tzc85tWZeG5CR36Z2GO2jFgCZ1rw25LqdagjCHSuSRg=
Subject key identifier:   FB:3E:1A:43:F2:06:DC:F8:E1:3C:A5:E4:84:A0:C4:51:A2:0A:71:5E
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285848E428439F43DB3EDA00E13180
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/6b2ec405-d37c-3524-b38c-fa3cc924acaf.roa
Signing time:             Sat 15 Feb 2025 13:32:19 +0000
ROA not before:           Sat 15 Feb 2025 13:32:19 +0000
ROA not after:            Fri 16 May 2025 12:32:19 +0000
asID:                     11032
IP address blocks:        192.139.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e4:28:43:9f:43:db:3e:da:00:e1:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Feb 15 13:32:19 2025 GMT
            Not After : May 16 12:32:19 2025 GMT
        Subject: CN=fc035c5f-56c1-4709-8179-e22cc7fb2bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:29:85:66:26:29:51:04:29:84:87:49:e6:
                    5b:7b:bd:a3:31:55:25:cd:f0:43:10:8f:cd:f7:e8:
                    60:cf:bf:c8:e4:72:e0:7e:b8:f2:51:5f:a9:de:c0:
                    0c:60:bb:9f:f7:8f:02:da:ad:14:7f:b8:ed:4d:fb:
                    fb:4f:28:ab:29:3e:35:24:d9:bd:42:cc:f7:ac:aa:
                    ff:c1:e4:4f:ba:b7:e3:00:43:f8:e1:24:f6:66:f1:
                    ee:b1:ac:a2:78:2e:57:8e:83:3b:06:65:e0:76:45:
                    32:79:42:0b:2c:b3:81:63:c1:c2:a2:2e:c3:90:07:
                    58:07:2a:b3:95:35:7b:e9:e8:72:5e:86:45:c2:fc:
                    ff:7c:20:69:0f:b2:9f:64:a2:32:11:ce:b9:d2:be:
                    88:4c:ad:a5:c5:06:e1:64:ba:c1:63:ff:4b:a0:71:
                    98:53:7d:5b:30:68:65:40:09:e2:f4:8b:50:38:c0:
                    08:19:12:eb:5a:ea:ae:fb:d5:8d:7f:35:4e:70:14:
                    b1:12:51:7c:97:91:d1:07:b1:07:e9:a3:bb:2e:b9:
                    cc:a1:e8:8f:dd:1d:c4:38:d6:af:e2:16:cf:66:30:
                    a6:22:79:bf:12:be:e5:a9:d2:65:b5:c6:9a:2f:3b:
                    cb:c4:36:5a:05:99:ec:23:9c:c9:f7:e6:40:01:7d:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3E:1A:43:F2:06:DC:F8:E1:3C:A5:E4:84:A0:C4:51:A2:0A:71:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/6b2ec405-d37c-3524-b38c-fa3cc924acaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:41:9a:61:32:d6:75:b7:01:09:61:e2:2a:2c:d4:b8:da:
         c7:e3:da:0f:43:a1:bb:6b:49:3b:fd:0d:68:8b:18:0a:dc:23:
         65:d8:89:aa:5a:f8:d7:a5:ff:00:42:47:6a:f9:69:ff:07:07:
         e8:1a:6a:f6:ca:e4:fb:7b:fa:d8:2f:a9:20:0e:7e:bd:a4:cd:
         be:9d:df:4e:1a:b4:04:1b:48:98:4d:48:1c:cd:12:fe:69:02:
         32:0a:e7:38:84:99:78:c2:16:c5:00:88:bd:ed:b2:2a:50:88:
         9c:cb:0a:39:9f:ce:85:bd:e6:22:12:e6:d2:ca:7c:7a:24:cc:
         76:1e:a8:fa:82:d8:21:69:cf:25:fc:91:bd:52:bd:2b:44:85:
         79:32:e1:c4:4d:35:8f:7f:d5:21:56:b1:48:8f:00:26:6f:05:
         f9:10:ba:9a:b3:39:d7:98:d8:03:10:5d:71:79:19:20:b5:83:
         8a:45:f3:ab:96:a1:28:1e:d4:ed:8e:31:59:a0:de:e1:47:ad:
         3e:1b:30:e5:3f:4c:2b:3e:c6:f1:22:99:41:df:b3:68:8c:9f:
         45:9e:9a:d9:5a:ff:89:cc:89:71:96:cc:5f:6f:4f:f9:93:2c:
         3a:96:86:97:15:14:52:eb:e1:8f:76:6e:4e:ae:30:bc:ad:88:
         75:b4:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:05 2025 by rpki-client