Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa
File:                     2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa (raw, json)
Hash identifier:          OReOHibelFl7hbUj1Q915C4PW/SnhQzHF0gnO0Ofu0Q=
Subject key identifier:   99:C7:A0:D0:65:3A:8C:F9:4A:11:77:44:28:8C:65:65:FF:1E:27:69
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285848143A84434CFFEFE7859A8900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     3360
IP address blocks:        20.154.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:84:43:4c:ff:ef:e7:85:9a:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=4476b498-769a-425c-bb30-5f5379ce7ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:11:a2:9a:ae:22:65:4f:ef:ee:9a:e1:ba:
                    a8:77:d7:76:84:e9:09:e1:37:6c:57:91:05:41:31:
                    72:5e:73:a1:b8:5f:7c:ce:4c:85:20:1b:b5:08:68:
                    f7:5f:a7:c2:b2:2e:5f:52:5d:84:66:bb:41:e6:e9:
                    76:63:4c:e9:bc:7a:00:aa:15:ea:52:67:88:03:1d:
                    9d:30:e3:d5:ab:83:99:a9:d0:e8:52:8f:b4:19:83:
                    bd:3e:0f:29:c4:49:b3:c4:ab:07:34:77:2d:cb:3f:
                    90:a9:3a:8f:56:a3:27:5f:60:cf:9d:1b:30:ea:4f:
                    14:41:f5:67:be:49:0c:54:6e:4f:58:d0:9d:84:76:
                    15:09:0c:79:ac:36:15:13:ae:6f:28:25:68:5a:b9:
                    55:25:cc:e2:0b:17:ae:1b:df:6f:02:e4:4d:49:8a:
                    dc:ca:5e:59:75:56:17:f7:6e:dd:f8:12:fc:9c:84:
                    6b:e6:56:59:6e:d9:3e:d9:6d:13:20:aa:85:70:dd:
                    5e:44:cf:55:57:81:67:f2:61:20:2d:68:56:29:5c:
                    8a:62:af:1b:74:9b:1e:8f:8e:fd:f8:63:fd:24:7b:
                    e8:d3:62:25:5c:2d:e0:17:f7:2e:db:df:b5:40:65:
                    a6:47:c3:bf:20:06:42:87:df:9c:98:c1:55:94:fa:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:A0:D0:65:3A:8C:F9:4A:11:77:44:28:8C:65:65:FF:1E:27:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.154.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:5b:a4:85:33:d2:be:44:86:c1:d0:28:18:96:56:24:8a:
         e5:80:4c:55:85:02:a0:ce:8c:a8:2c:5b:f9:b2:63:ff:d7:bb:
         3f:7e:53:2a:71:89:cc:1e:7a:fc:78:0c:f7:bb:14:bb:c7:10:
         64:ec:c1:0e:8e:8f:4b:27:e6:67:fa:dc:7f:80:d3:33:9a:b8:
         e9:0c:be:bb:7f:5a:75:7d:8a:b3:c7:72:65:b9:7a:c7:0f:c7:
         b9:51:36:f0:2f:0f:13:41:22:87:10:b6:74:7c:94:4c:95:a9:
         32:96:7a:40:d2:18:bc:9d:63:4e:0d:1b:4f:22:4a:0d:e8:1d:
         72:fa:3e:b9:92:4b:3c:36:42:4b:87:b2:61:bc:17:39:32:8b:
         72:e7:c8:4d:fd:43:d4:4c:e1:d5:64:70:02:ef:73:81:ee:54:
         ab:1d:9d:d4:10:9a:78:76:02:d6:be:e4:53:9b:c3:c4:f7:4f:
         f2:b5:cd:3b:c3:36:17:73:c7:a4:fe:01:9e:a1:06:9e:c3:6c:
         89:eb:a5:58:d4:3c:af:92:e9:3e:4b:ea:19:0a:8a:9a:3d:71:
         e4:ed:a1:96:9c:4e:40:a8:5d:aa:c5:e4:30:33:fb:62:ee:3a:
         17:69:0f:91:b3:8e:63:e0:08:b2:fa:56:6a:82:23:aa:e1:d7:
         c3:0d:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:42 2025 by rpki-client