Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6d69ef9f-5914-348f-8a3c-f2ce6597ff63.roa
File:                     6d69ef9f-5914-348f-8a3c-f2ce6597ff63.roa (raw, json)
Hash identifier:          AkbrGN80esTP3/ZDEiIDSx1FjgXXjYZ+642P8mi1duc=
Subject key identifier:   B6:E3:43:B3:03:1A:03:3F:76:1E:AD:63:3E:50:9D:99:18:65:DF:0C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858486695BD5F8A54D045709B9600
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6d69ef9f-5914-348f-8a3c-f2ce6597ff63.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     3356
IP address blocks:        192.25.56.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:bd:5f:8a:54:d0:45:70:9b:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=81b23bc4-dc55-4322-88b1-1db714d0e672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:32:74:2e:ab:c8:8f:cf:51:bb:8e:9e:82:
                    01:80:68:ce:be:09:4a:f1:72:60:dd:0e:c2:ba:90:
                    10:f3:e0:d9:23:f1:75:7b:0b:d9:37:ae:e6:ac:99:
                    6c:42:eb:0c:76:0b:d8:62:48:d8:19:41:e5:6b:f0:
                    30:b0:80:a6:77:24:14:3d:ea:98:fc:37:8b:24:88:
                    88:2d:45:83:07:95:b6:a4:4b:42:b5:5f:46:3a:d9:
                    6c:e6:dd:9e:66:a3:74:6b:95:4d:ba:0a:4a:18:54:
                    f7:31:a1:44:29:67:88:00:cf:35:66:a2:17:e9:d3:
                    86:32:a8:e2:0a:4e:a9:26:1c:16:16:b5:8b:bd:7d:
                    8f:ee:c6:40:11:ea:f2:d2:15:7c:a7:26:7c:47:33:
                    d8:b9:1d:52:b4:da:e3:03:48:08:61:bd:a3:24:64:
                    29:2f:50:98:e1:dd:e4:93:a5:5d:48:2b:c9:cc:79:
                    0a:75:66:be:3a:eb:b3:5f:e6:a3:cf:71:67:9d:40:
                    03:c8:82:35:99:4a:de:a6:70:e6:27:a5:a9:b1:1b:
                    44:bd:20:e7:40:92:74:d4:29:ef:7a:f9:d8:39:a5:
                    6b:9d:0f:31:97:19:52:70:67:93:6d:ed:7b:ba:a6:
                    e0:bf:34:9b:73:ac:cf:62:3c:62:d6:86:d2:41:f4:
                    e7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:43:B3:03:1A:03:3F:76:1E:AD:63:3E:50:9D:99:18:65:DF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6d69ef9f-5914-348f-8a3c-f2ce6597ff63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:46:c5:26:f0:63:e4:14:5c:06:90:2b:58:00:e4:dd:ce:cf:
         a2:fa:be:ac:7f:8a:a2:ca:7a:eb:5a:0a:13:49:e8:ff:20:ad:
         f9:97:83:de:79:d2:df:d7:bc:84:5f:07:94:b5:65:0d:c3:2b:
         a5:02:92:e0:c9:a3:d5:62:da:18:cd:39:d3:82:24:b6:f8:0e:
         64:69:38:25:cd:48:f7:b9:02:39:45:e8:65:7b:02:7c:94:e7:
         e7:ae:97:37:48:aa:6b:ac:33:fa:bd:9c:a2:08:b3:bd:7b:b5:
         87:eb:30:ff:88:58:8c:d7:46:df:ec:6f:64:67:09:a1:5a:3e:
         d0:dd:0a:dd:b0:f4:24:99:0f:16:04:b8:ea:a7:82:ad:08:26:
         b5:aa:14:d9:aa:87:f1:5f:e7:ac:52:c7:57:3d:4a:05:87:c3:
         7b:66:64:cf:f6:43:c4:94:c6:c4:04:00:03:18:e5:b0:c0:55:
         f3:64:aa:c5:0a:27:5a:e8:f3:a6:f2:d7:84:d7:a5:11:22:7c:
         34:39:2d:27:7b:1e:eb:31:54:c7:5a:79:df:c8:08:4e:dd:ec:
         f5:9f:96:1f:b7:61:2d:5e:3f:82:95:ca:bd:33:b4:13:93:5f:
         b1:a3:9e:86:31:d9:7d:3f:cf:bb:dd:13:0f:2d:19:72:c3:cd:
         42:03:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:51 2025 by rpki-client