Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/5cd9cde8-ffa1-3297-958e-057f37aa1dfb.roa
File:                     5cd9cde8-ffa1-3297-958e-057f37aa1dfb.roa (raw, json)
Hash identifier:          KpC1s0tzwBlVE3unXprTV1cGlxdVANgvt7/ZAI+VaAU=
Subject key identifier:   42:8E:77:BB:3B:F5:46:6F:9B:6C:FB:1D:BD:B0:D0:1D:71:C3:21:F6
Certificate issuer:       /CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
Certificate serial:       010D0C9F4328584195CF2983DCB3D8DD72046428
Authority key identifier: EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/5cd9cde8-ffa1-3297-958e-057f37aa1dfb.roa
Signing time:             Sun 16 Apr 2023 18:56:11 +0000
ROA not before:           Sun 16 Apr 2023 18:56:11 +0000
ROA not after:            Sat 19 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:95:cf:29:83:dc:b3:d8:dd:72:04:64:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
        Validity
            Not Before: Apr 16 18:56:11 2023 GMT
            Not After : Jul 19 04:00:00 2025 GMT
        Subject: CN=e20f62f7-f075-43fc-876e-b4087f36c638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:ad:76:2a:89:e3:f3:c3:4b:05:2e:b7:9b:
                    e4:17:90:89:65:16:c3:04:91:67:88:e9:78:0b:36:
                    31:b3:f4:cb:0d:18:31:62:a8:4b:d6:f5:b3:34:b4:
                    13:1a:eb:47:08:4a:f7:ec:fe:b2:6d:df:35:9d:6a:
                    bf:90:84:28:2b:e7:2b:0e:49:1b:9e:21:fc:59:3e:
                    a8:bd:50:bd:70:ed:57:87:88:fd:0f:f7:5f:17:75:
                    fe:ae:89:cd:a1:82:09:b1:87:03:ff:04:39:4d:b1:
                    7b:61:38:17:84:52:7f:dd:7c:57:88:dd:f2:23:b3:
                    8f:a8:bf:ab:44:47:e2:e6:79:de:cb:48:51:7f:3c:
                    f2:d5:85:a6:1f:c5:01:1a:c5:80:db:6f:9a:3e:10:
                    71:bb:4d:51:69:33:ec:cb:d6:45:b9:2d:12:d0:bc:
                    90:e3:c7:43:59:d3:4c:73:3b:32:09:20:af:7a:14:
                    6b:fd:cb:4d:2a:77:e6:02:b9:52:85:74:c9:89:5e:
                    40:de:e4:2e:e4:dc:b4:93:d1:df:60:43:b8:e5:37:
                    b9:0d:db:02:94:35:31:29:0f:74:bb:8a:6e:ba:5e:
                    e5:9f:e8:e7:64:60:d6:6a:f5:49:72:95:a7:8d:19:
                    5f:a1:fc:88:84:40:35:65:58:af:e2:97:e2:e5:8b:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8E:77:BB:3B:F5:46:6F:9B:6C:FB:1D:BD:B0:D0:1D:71:C3:21:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/5cd9cde8-ffa1-3297-958e-057f37aa1dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.crl

            X509v3 Authority Key Identifier:
                keyid:EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:a8:04:70:97:f8:97:8d:ae:55:44:bc:11:c2:79:94:41:
         e5:f2:1b:ef:43:f3:e9:0e:fb:80:9f:ed:1d:31:98:a7:77:f4:
         94:c1:65:0d:37:5a:71:e1:db:70:0a:0f:85:ab:da:50:09:a5:
         f8:38:34:52:a1:f6:d4:ad:e7:28:1a:07:47:65:52:4d:4a:39:
         0a:1e:0a:f5:92:b7:71:65:a0:4f:a6:50:04:2a:23:76:bd:19:
         70:81:f5:ab:77:4c:78:bf:0b:c0:03:90:2d:b1:b5:61:3b:80:
         3f:91:40:b0:80:57:da:4c:20:87:69:c7:f1:32:76:73:a1:f7:
         d6:20:10:0d:9e:a4:93:fe:55:a3:d1:c1:e7:68:58:d2:17:15:
         f8:84:95:2c:e7:c5:36:59:03:9e:fd:9f:da:ea:a1:f6:f4:6c:
         66:dd:ce:ed:c3:62:b1:59:25:a8:c5:cf:cf:88:9a:11:15:25:
         b5:2b:bc:c2:b0:39:d5:18:33:39:9b:8c:58:d5:91:05:03:6d:
         f7:46:79:a8:66:80:ae:40:ea:1a:c4:18:3a:d8:c3:a3:32:d1:
         9f:4a:c7:9e:86:a6:0b:34:52:b1:06:9e:24:bf:59:e8:11:a7:
         a1:51:de:99:11:42:0b:22:d3:ad:25:0a:d6:c0:a5:d6:c7:1d:
         f3:de:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:08 2025 by rpki-client