Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa
File:                     f4147287-cce9-3a3f-9251-9b92391a0868.roa (raw, json)
Hash identifier:          SJKj2T/1ZlCOjsj2ilkk32a2jYH+bZeuu58vk+I7JKs=
Subject key identifier:   14:36:15:E1:F3:8B:4D:1A:F2:10:5D:18:DB:03:0A:44:C5:9B:C8:CA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848DEA12FF24AE3C29F6F9B83C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     15169
IP address blocks:        108.177.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:2f:f2:4a:e3:c2:9f:6f:9b:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=5e55371c-c05e-400e-976b-8810cae437d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:ea:d5:86:0e:5d:62:9b:1a:0b:8b:bc:c4:
                    b5:3d:ae:a2:b9:52:6e:01:1b:99:de:8b:a5:ab:b4:
                    2b:9e:5c:ee:af:38:be:75:33:f3:76:7f:3f:bb:c2:
                    fe:80:13:3d:92:87:46:38:67:bc:4a:1e:b5:c3:17:
                    58:dd:f7:16:19:70:10:86:84:84:92:65:95:43:c0:
                    f7:a8:78:4e:bf:3b:3f:18:23:24:8c:80:cc:6b:26:
                    37:ac:3e:4e:01:91:df:f0:ce:6a:3b:37:45:b7:df:
                    bc:27:a7:f4:ec:38:76:14:63:75:88:d2:d6:d8:d1:
                    d2:39:09:f6:04:e6:00:f2:e8:9f:dc:26:72:73:1c:
                    b2:9c:02:c6:7e:da:92:2a:a1:49:82:b3:78:9f:58:
                    31:9c:e4:58:9a:4a:d9:3b:42:7e:da:b2:20:bf:bf:
                    5a:89:37:9d:fb:3a:3d:9b:73:0c:47:93:05:ab:1e:
                    a6:c9:7f:81:b1:83:06:9c:bc:76:f5:aa:c7:16:c7:
                    a5:37:13:da:28:62:77:54:bf:bf:93:ba:53:44:5d:
                    ac:da:bd:c2:5e:0e:3b:22:d0:e4:af:42:6c:9e:23:
                    48:08:bc:d4:36:f2:fe:6f:be:f3:cd:9e:fb:4b:bb:
                    37:1c:27:c6:54:a1:ce:31:36:fd:8a:39:29:ae:e4:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:15:E1:F3:8B:4D:1A:F2:10:5D:18:DB:03:0A:44:C5:9B:C8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:d3:7a:11:46:7b:59:39:aa:b5:58:3d:d5:ad:91:14:73:
         a7:95:18:96:cd:cb:f8:4b:06:b4:34:53:cf:2b:af:a3:4f:f7:
         0b:03:59:7c:f5:5d:1a:0b:2b:fc:35:ec:66:9e:0d:24:e3:e2:
         5d:71:c2:8b:3a:82:54:81:af:67:cd:b4:bd:7e:c3:c8:ae:07:
         53:8b:ee:07:85:28:f7:bb:e8:88:9d:e4:95:89:44:01:8b:49:
         74:95:6e:5a:67:29:1b:93:7e:a2:17:4c:04:d6:6a:89:a0:27:
         ba:84:38:17:e6:97:50:45:2f:d5:28:7c:3c:a7:1b:4f:a6:46:
         9e:a8:43:fa:c1:27:7e:dc:fc:9c:ff:3e:81:f2:60:92:45:8c:
         e6:06:8b:7c:8e:62:ac:6d:c4:35:01:a0:d6:30:9f:4e:31:0d:
         54:06:2a:4c:7d:f6:1d:ab:10:a1:d2:0b:0a:c7:66:51:f3:04:
         1c:73:57:11:f9:9d:2b:5f:f5:de:1d:fa:9c:42:e8:92:2b:4e:
         d1:4d:38:bd:72:8e:88:c0:a1:68:de:6c:4f:82:d6:d5:27:0d:
         71:65:c0:c6:64:fa:b3:3c:1d:09:3e:65:d8:5c:20:d1:b5:89:
         7b:a2:8c:9b:14:ac:74:70:44:75:84:af:93:4b:2e:95:12:cb:
         94:df:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:42:12 2025 by rpki-client