Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa
File:                     7291e172-07a7-3322-828d-5422f9b4ebb0.roa (raw, json)
Hash identifier:          hgF41qG5k8ZsZNIYXlM8vMgbLdm8UDqLySenR9MIfJo=
Subject key identifier:   41:F9:1A:F9:D6:BE:79:C5:3E:31:79:78:C9:BF:AF:D4:E7:73:7F:11
Certificate issuer:       /CN=5d69368b-4714-4878-9f6c-905e98da853c
Certificate serial:       010D0C9F43285848F65BE28B2C1CAF43A9818800
Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        158.51.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e2:8b:2c:1c:af:43:a9:81:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=3de0aa15-78c7-48a9-b057-f1c4f88d1607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:5d:2d:d6:f1:d8:c7:f3:55:66:94:18:49:
                    cb:1d:c3:0a:1c:85:1d:14:2d:03:3d:fc:dd:7c:04:
                    aa:80:95:ec:f3:9f:76:d4:ce:86:cf:b4:de:c4:b7:
                    c9:d1:bb:45:ad:d0:6a:20:c7:6d:19:da:16:04:c7:
                    78:2c:47:49:12:4e:a7:3a:01:fe:74:6a:b8:94:16:
                    1b:fe:be:25:94:12:30:1a:8c:9f:85:71:2e:aa:b6:
                    0e:bf:8b:0c:22:e6:f8:5d:c8:e9:dc:4b:ae:5e:08:
                    21:e7:c9:8f:db:2e:77:4a:08:56:0a:63:6a:8e:ac:
                    01:90:10:73:74:c1:6a:c2:cc:ea:6a:ba:d1:f7:11:
                    32:4d:63:4b:77:d6:b0:42:b9:23:b9:5a:df:ec:b2:
                    ab:57:30:5b:de:b0:ea:a4:7e:96:82:88:08:98:96:
                    b6:d8:44:ef:24:11:3a:87:89:d9:74:5e:2f:90:d5:
                    1b:89:a6:9a:b0:1e:70:a6:9b:b1:30:63:f1:cc:ed:
                    6d:ac:d9:86:62:b7:21:3a:86:66:d3:f6:83:4a:6d:
                    ef:6b:d0:0a:ce:a7:9d:4c:36:01:91:c8:ef:1b:6e:
                    b8:8e:3b:b2:b3:25:40:7d:90:4a:d0:9a:27:5b:f4:
                    92:19:1c:e2:c8:93:e1:a1:da:dd:9a:7f:43:ae:1e:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:1A:F9:D6:BE:79:C5:3E:31:79:78:C9:BF:AF:D4:E7:73:7F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:b3:9b:20:78:a8:83:1b:41:d3:86:5c:b1:b5:0d:4a:b5:
         53:d7:8a:b1:1a:0d:e6:11:79:ec:7c:ee:1b:db:79:82:ab:9a:
         36:86:c0:b5:01:b2:3a:bb:bc:61:c3:ba:30:3e:51:09:07:02:
         44:1a:19:89:5b:03:22:32:ab:e5:b7:c3:63:5f:96:fc:0e:a9:
         cd:99:e3:d4:29:69:b0:5d:72:e0:06:ac:22:88:e6:77:99:c4:
         23:3a:62:50:26:c0:6a:24:2c:2e:ef:31:65:40:ad:c4:23:51:
         9f:62:29:d2:53:b9:35:72:2f:df:d2:4b:9f:b2:d0:f2:6a:b1:
         c3:ab:21:12:55:07:55:00:f7:a7:5e:01:ec:93:82:89:19:1d:
         d7:df:a7:33:b6:00:e0:73:4e:cb:e0:84:9f:de:93:07:26:6f:
         3a:84:df:ca:ce:d5:33:1c:56:44:bc:80:c3:0a:11:3a:f5:ba:
         6f:43:18:73:56:93:dc:a7:ca:4d:8c:8e:24:47:5f:f3:34:f2:
         42:08:7e:24:3c:61:02:af:16:65:28:a7:9c:ad:75:0e:05:b6:
         37:88:dc:4b:a3:98:55:5d:2b:86:a4:7a:ef:22:40:42:74:81:
         35:38:db:76:3f:ff:03:4e:83:65:be:3f:ca:0b:4c:54:a6:da:
         0d:ce:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:36:01 2025 by rpki-client