Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa
File:                     80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa (raw, json)
Hash identifier:          5nuDznbXiRzahm93PHOhW8V6CDMTAMv+Y0m0ataLiVU=
Subject key identifier:   6B:4B:38:5B:1C:2E:8D:D0:FE:8F:25:93:C5:F1:B8:AC:D9:13:08:3E
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F432858494733DFF04384183C19E69D80
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        139.177.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:df:f0:43:84:18:3c:19:e6:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=502e3466-a0da-4c0b-a6a8-35caac64a800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:90:ac:f4:60:3c:ad:e7:b9:a9:d7:3a:08:
                    5c:e1:da:ed:2b:4c:df:63:13:55:f6:9e:c7:73:18:
                    14:a9:07:6d:2f:0e:fd:c3:d1:8b:fd:0c:96:dd:55:
                    b0:aa:e6:8b:ac:2f:90:e0:09:bb:23:ab:b1:71:72:
                    43:54:a0:0f:1e:fb:61:ee:ac:3c:90:d0:b4:8e:71:
                    ba:42:4b:3e:8a:b0:70:2b:92:47:61:bd:6d:00:39:
                    b5:d1:86:a7:0e:ce:95:ec:f3:fb:59:88:26:b3:c8:
                    a8:b8:80:dc:1b:cb:7a:b2:6f:d8:a9:a0:ea:03:48:
                    9a:0b:df:9e:e6:8b:fd:8e:99:2e:e0:44:85:8a:ad:
                    ce:ac:06:6d:bc:ec:b2:37:70:65:9b:ac:30:de:2f:
                    9a:1e:fe:d5:b1:c4:79:50:28:6c:9e:b0:1e:1b:bb:
                    8c:72:48:ce:13:15:cd:52:86:cf:47:f3:a6:44:2d:
                    15:34:77:06:46:b2:dd:71:b3:b1:d7:e4:b4:72:63:
                    b5:6f:b7:76:e7:27:ea:96:5a:be:00:06:ee:0e:9a:
                    7e:ec:1b:9b:0f:3d:32:af:5e:3a:16:9b:d9:dc:1e:
                    18:9a:4b:9a:e7:54:a5:aa:67:19:4d:a4:d2:0e:cd:
                    04:a1:3f:cf:87:9c:4e:74:38:b9:e6:2f:70:53:42:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:38:5B:1C:2E:8D:D0:FE:8F:25:93:C5:F1:B8:AC:D9:13:08:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:80:18:13:cd:75:ed:10:47:ac:cd:a4:a6:27:75:66:2d:
         f0:69:65:63:cc:ee:50:83:34:c6:d9:5b:02:50:66:78:75:8e:
         be:72:c3:ba:95:9c:7a:0a:34:47:12:54:ff:65:79:97:9b:9e:
         86:3d:c3:d8:b7:3f:91:dd:b0:f2:f6:c1:4d:e0:c8:df:6c:68:
         69:da:a8:4a:59:11:63:09:b6:a7:71:2d:c7:d9:95:de:28:46:
         1c:4b:7b:74:78:d7:58:f2:3b:f4:eb:f1:6c:f5:33:ef:11:06:
         0c:64:63:0a:dd:59:c7:8e:bc:f6:c7:88:c3:b8:23:f0:17:d4:
         26:7d:4e:df:f8:14:c2:aa:65:c7:1a:ae:73:4a:4b:33:9c:50:
         1f:b6:28:31:a0:aa:ef:a2:96:fb:3b:7a:20:da:e3:32:61:fb:
         6b:8f:a3:81:53:64:16:19:69:f7:68:51:6d:24:82:c7:83:5b:
         a9:43:97:da:c3:9f:c2:a2:dd:2d:8d:92:db:d8:bf:a1:b4:01:
         34:5c:f0:33:2b:c7:33:5a:d4:82:ba:15:ab:dd:b7:88:6c:1f:
         93:8b:92:71:8d:2f:d2:d3:28:30:eb:bc:96:ad:34:b0:1c:4a:
         20:4c:20:21:27:5b:70:3d:3d:4c:1b:5f:ab:81:fe:63:e6:40:
         18:27:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:06:49 2025 by rpki-client