Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa
File:                     e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa (raw, json)
Hash identifier:          R5R9zR4O6WDRlQLKI7hgwFnmibmKc0IJRC63QbPUeA0=
Subject key identifier:   33:56:A5:B6:E8:E7:E7:2C:C4:51:46:1D:47:17:69:22:BF:90:91:63
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285848E50ABABC29F4BF4305F5BF80
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa
Signing time:             Sat 15 Feb 2025 21:08:37 +0000
ROA not before:           Sat 15 Feb 2025 21:08:37 +0000
ROA not after:            Fri 16 May 2025 20:08:37 +0000
asID:                     376
IP address blocks:        192.139.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:0a:ba:bc:29:f4:bf:43:05:f5:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Feb 15 21:08:37 2025 GMT
            Not After : May 16 20:08:37 2025 GMT
        Subject: CN=6d72fdad-4a63-4792-bf3b-987f46e50ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:f3:b8:90:77:fc:7c:90:21:55:df:d9:7f:
                    68:31:3e:ca:95:9f:f1:29:40:0d:42:5b:d8:4d:bd:
                    ad:25:d6:39:63:9b:0f:0a:99:14:3d:b8:c7:8c:cb:
                    3e:ee:1b:74:51:78:2f:60:b5:70:e1:cf:b3:67:18:
                    06:c6:9e:68:09:6e:a7:d9:28:11:65:cb:b5:e8:9a:
                    8d:3d:71:de:52:ca:a9:7c:d6:d1:d8:78:12:e7:cc:
                    f9:67:05:74:55:dd:4e:df:ab:7a:9f:55:21:fe:aa:
                    f9:18:20:89:5d:1b:a0:c5:56:36:88:f9:40:c9:b4:
                    88:e7:9d:b9:9c:1d:83:bb:f8:30:0f:51:4c:21:6e:
                    20:4b:2b:e3:51:26:47:4d:24:21:48:43:4e:e6:2e:
                    72:88:84:97:dc:eb:93:0e:7d:4a:02:5b:a6:1d:d1:
                    b1:1c:70:13:3f:86:c6:ef:7b:67:60:a8:5c:e1:21:
                    d9:04:7b:0f:72:57:ac:2b:4a:86:f1:8b:be:9a:56:
                    a9:26:a6:25:80:13:e5:b0:8d:6e:33:e4:d3:e1:71:
                    27:1f:2d:74:59:2d:90:2c:dc:00:2d:80:ed:c5:22:
                    03:6a:1b:15:30:1b:b5:7a:b3:10:13:a5:45:36:51:
                    f5:01:6b:82:c7:15:9e:6d:dd:9a:3e:39:59:bd:6e:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:A5:B6:E8:E7:E7:2C:C4:51:46:1D:47:17:69:22:BF:90:91:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:00:a2:be:1c:c3:3d:46:74:ca:0d:e8:6c:99:06:67:5f:f9:
         b0:d4:d3:39:09:58:9e:f5:46:69:78:bb:ee:93:8c:03:6f:7a:
         6a:cf:3f:7b:35:5e:a3:a5:8c:94:00:70:ac:b6:26:5b:25:0d:
         a6:d7:6a:39:96:5b:39:df:da:a8:10:8e:e4:72:55:4d:9f:c1:
         e9:b0:80:8f:09:90:81:7b:80:39:9b:7b:1b:1d:f8:5e:76:72:
         71:b6:70:22:ac:47:e2:d5:9f:64:10:52:d3:57:83:67:f0:e0:
         e8:9b:1c:3b:65:54:60:cc:04:77:01:f3:85:3e:7d:7e:a5:86:
         a7:b1:d0:66:0a:0a:93:1a:5f:e9:21:b0:ab:79:90:ca:89:3f:
         10:10:76:a4:30:99:f4:bb:4c:80:43:72:5a:96:8e:a6:69:cd:
         56:c3:c4:4e:da:a2:d1:5b:2b:7f:80:72:99:83:3e:30:83:ff:
         46:7e:c5:eb:aa:4f:33:6b:a9:ce:5a:e6:9d:8f:34:2e:15:e7:
         20:98:b7:23:73:3c:4b:c6:8c:1f:70:f5:eb:81:f8:78:59:1a:
         93:5a:74:b8:59:d8:d7:23:39:e0:5e:e4:48:24:e3:84:72:a3:
         3e:fe:2e:e5:f1:bd:55:3b:be:0c:d3:e4:1e:b0:98:df:ff:88:
         8d:da:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:38 2025 by rpki-client