Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
File:                     5f596c8b-f66f-38b2-bbfa-5462502cea09.roa (raw, json)
Hash identifier:          qgkJb6jD5Rc7JldnP2jOe2xy57t9ilgV45Qes2bXFJU=
Subject key identifier:   1D:9E:64:F4:25:CC:0F:8F:2D:40:16:31:70:63:BE:C0:F9:43:F6:3F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285848B6261EE98B38B9B98714D8A0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     13445
IP address blocks:        144.196.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1e:e9:8b:38:b9:b9:87:14:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=86b68dd1-3017-47e4-a89b-3be5b6e44937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:fe:c3:5d:6e:bb:44:f0:93:b0:c0:c5:0f:
                    20:a6:a4:48:e2:65:13:c9:fd:0e:a7:23:16:ee:44:
                    e6:b4:73:f9:8d:46:f8:08:f8:0a:11:ab:64:ed:be:
                    25:d7:1d:32:3d:0e:e2:2c:b6:8e:c1:45:d9:18:fd:
                    08:4e:64:ef:9d:2e:a3:ba:60:0c:69:ce:fc:f3:12:
                    8a:89:39:e6:76:94:90:4d:a5:06:7f:5c:68:a4:03:
                    c1:00:d3:83:24:66:a6:e0:fc:51:24:8d:ae:5b:eb:
                    c3:50:cb:6a:78:61:18:a3:9d:58:58:11:3c:5f:c1:
                    11:59:ca:4f:2f:1e:dc:95:78:cb:f8:0e:af:27:b3:
                    44:0f:2a:7a:f9:71:62:c8:04:b1:14:68:d7:bd:54:
                    a0:32:f9:ea:a8:d8:fa:3d:52:21:85:3a:61:46:5e:
                    90:9e:99:75:d7:e2:34:66:4a:71:09:db:1b:a1:be:
                    99:88:db:61:cd:50:1e:10:99:65:84:64:b3:75:a8:
                    20:b6:a2:2d:7a:41:08:ed:f5:23:40:6b:9a:86:87:
                    d0:28:1a:0b:f5:39:2b:8f:99:79:6e:d1:01:57:2d:
                    15:0b:3e:c2:be:a1:2f:ca:f2:b4:88:96:90:6f:c9:
                    a2:7e:00:80:25:21:f8:f4:ef:30:e2:57:a3:30:b6:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:64:F4:25:CC:0F:8F:2D:40:16:31:70:63:BE:C0:F9:43:F6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:62:4d:bd:0c:0b:ed:bb:7a:0e:03:5a:1f:b9:0f:b7:d6:bb:
         3f:d2:ae:9d:eb:68:6c:1b:23:46:47:cf:84:08:8f:d5:9e:a1:
         b7:65:46:7a:8f:0e:21:c6:b9:cf:c8:64:65:0d:67:66:c9:9b:
         ad:92:e5:ce:28:66:44:c5:ed:79:3e:66:44:0b:da:6f:8b:35:
         94:ed:95:dc:3e:4f:f1:27:47:47:19:ee:20:29:c9:d7:e9:8c:
         75:43:73:89:c8:35:c8:99:02:80:e4:8a:6e:38:54:f2:4b:84:
         b4:3a:3d:a8:33:98:ed:0c:49:80:3f:b5:e2:75:4f:b5:eb:27:
         a6:36:da:bf:3b:67:0a:df:63:a5:77:bc:47:f8:cd:ea:6f:d6:
         20:7c:b0:7a:a4:a1:14:13:a5:30:41:de:f2:01:8f:2a:56:07:
         2d:e4:5a:75:d4:77:a0:ba:1a:d8:9c:b7:b5:ba:96:c4:ef:d4:
         46:9c:4f:f6:b9:62:2c:5f:a7:0d:e5:98:97:c7:94:51:e3:8e:
         0d:d5:94:c7:5f:3a:d6:cb:81:cb:a2:28:d1:ce:c7:c6:72:47:
         10:21:dd:2e:c7:ad:3d:04:47:0f:74:9d:ad:1f:77:04:de:e4:
         ab:50:77:d0:80:4b:1c:c3:e7:54:ad:1d:ae:97:d1:ec:48:bb:
         63:df:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:32 2025 by rpki-client