Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/49663927-7f02-31ec-aea9-4075413b1b5e.roa
File:                     49663927-7f02-31ec-aea9-4075413b1b5e.roa (raw, json)
Hash identifier:          sEhblr8o0z7VOx9S2FIwsGOf8M1dwrgjX1K9cP6c6lI=
Subject key identifier:   F8:14:2D:D6:DA:C6:32:B4:6C:CE:FC:63:3A:6A:23:C4:03:5B:98:47
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584836A7B07144D3D3C83C59BE80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/49663927-7f02-31ec-aea9-4075413b1b5e.roa
Signing time:             Sun 15 Dec 2024 09:58:25 +0000
ROA not before:           Sun 15 Dec 2024 09:58:25 +0000
ROA not after:            Sat 15 Mar 2025 08:58:25 +0000
asID:                     54535
IP address blocks:        146.197.27.0/24 maxlen: 24
                          146.197.79.0/24 maxlen: 24
                          146.197.83.0/24 maxlen: 24
                          146.197.120.0/22 maxlen: 22
                          146.197.242.0/24 maxlen: 24
                          146.197.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:36:a7:b0:71:44:d3:d3:c8:3c:59:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 15 09:58:25 2024 GMT
            Not After : Mar 15 08:58:25 2025 GMT
        Subject: CN=c656f08f-70fa-4985-a685-cf742316b8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:5c:c0:e8:82:13:78:5c:44:fc:81:30:30:
                    ac:fc:21:18:8c:59:41:62:67:48:3a:60:42:ca:6d:
                    01:9c:7e:06:55:bf:16:a5:8f:80:49:3f:bc:db:d5:
                    20:94:81:a2:7c:3a:9f:c7:71:ab:bb:e6:9b:4e:c7:
                    c7:6d:b2:b6:50:fd:fd:73:70:f7:d5:74:7a:8b:7d:
                    4e:dd:68:1e:67:0b:31:37:b9:66:0f:69:38:d3:3f:
                    ad:77:4f:31:32:2e:a6:9e:cd:63:07:8d:5b:c1:aa:
                    f1:3b:53:fe:a3:fb:a9:64:49:d6:7f:f7:e1:31:f6:
                    cc:a3:6c:f8:9a:5c:ad:61:3a:13:f6:73:cf:1c:2a:
                    9c:56:5b:e3:f2:83:10:2c:ba:59:81:86:5d:de:43:
                    3e:ab:2e:01:7c:a0:14:e1:bd:13:95:fa:27:29:5f:
                    00:f5:2e:a6:ff:56:dd:92:4f:f6:50:54:26:ad:41:
                    bc:98:cd:28:72:60:d8:91:80:39:9d:74:2e:56:90:
                    85:96:1a:d6:d5:0a:1e:b3:6e:d1:8d:33:3f:06:14:
                    9e:0a:9e:82:85:c0:6c:cf:9c:8e:a8:d0:c6:97:43:
                    95:89:9e:7f:5a:80:6f:cd:4d:4d:75:a6:c2:6c:8c:
                    e5:e4:24:05:01:fe:b0:19:8a:8e:25:39:ed:0c:0a:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:2D:D6:DA:C6:32:B4:6C:CE:FC:63:3A:6A:23:C4:03:5B:98:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/49663927-7f02-31ec-aea9-4075413b1b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.27.0/24
                  146.197.79.0/24
                  146.197.83.0/24
                  146.197.120.0/22
                  146.197.242.0/24
                  146.197.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:79:31:a6:59:7f:7a:68:86:06:45:c9:74:57:df:f3:ca:79:
         61:33:ce:22:de:b9:9b:fa:05:bb:aa:1c:4f:6c:ac:cd:e4:77:
         f9:0e:4c:4c:50:76:34:6c:2e:9e:a2:5d:97:eb:28:7d:17:76:
         fd:2d:aa:9d:56:49:87:cb:62:8f:0d:52:bc:56:1e:88:ff:32:
         c2:9a:1b:10:62:c4:fd:c2:4f:72:f0:4a:eb:48:82:b0:05:66:
         a1:ab:76:4c:80:19:78:57:de:04:fc:1b:fe:30:5e:0d:96:91:
         26:e5:c1:ce:76:85:77:48:6e:61:9b:dc:f5:cf:c7:82:36:27:
         50:57:eb:1d:3e:b9:d4:a8:f3:3f:d4:db:2b:ba:21:dc:a9:b7:
         61:44:02:31:fa:b4:b0:2f:36:d9:1f:31:4b:62:f0:de:bf:fc:
         70:30:0e:7f:7e:a9:18:d0:96:0b:03:09:73:c8:b6:68:1e:df:
         00:dc:d4:22:3b:a7:dc:7a:35:ff:ee:ae:25:bf:ea:c7:45:49:
         6e:ed:e4:a9:62:3c:18:e9:4d:a8:8d:c3:1c:a4:9c:26:7a:ed:
         c9:ec:89:d9:91:ff:a0:7b:f8:86:43:97:8c:3f:2f:e9:74:c0:
         9a:59:cc:84:de:3b:a6:eb:d5:6c:a0:5d:17:91:a9:1e:04:04:
         18:de:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:39 2025 by rpki-client