Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
File:                     7ec506b0-9799-3a53-982d-39afbe885b36.roa (raw, json)
Hash identifier:          VX4a+G7Bc5bxv/6xyOnYjkv7NUv1ij3c6/wZZb5PNjg=
Subject key identifier:   E3:BA:01:9F:7C:B0:7B:19:71:91:AC:10:7E:8F:AA:27:D7:C1:8F:24
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858481705104D4595F46708FE0100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
Signing time:             Wed 04 Dec 2024 02:00:39 +0000
ROA not before:           Wed 04 Dec 2024 02:00:39 +0000
ROA not after:            Tue 04 Mar 2025 02:00:39 +0000
asID:                     203
IP address blocks:        20.134.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:17:05:10:4d:45:95:f4:67:08:fe:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec  4 02:00:39 2024 GMT
            Not After : Mar  4 02:00:39 2025 GMT
        Subject: CN=42aca066-e9eb-4255-ae95-6994bca32f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:e4:c2:8a:6c:2e:55:c2:ee:67:8a:ed:25:
                    47:f4:ce:4c:d5:fa:e3:a6:55:6b:c5:81:e1:34:11:
                    75:29:af:e2:3f:29:08:9d:8d:dd:80:db:20:e4:df:
                    64:d8:f3:cd:0f:25:16:60:ed:c6:a7:8f:8f:82:a7:
                    db:3e:80:ec:28:62:a8:17:31:c3:ed:22:33:3b:53:
                    d4:cd:51:07:be:4e:2b:62:d2:a2:49:55:2c:22:66:
                    c5:73:cc:45:41:73:92:de:45:6d:66:44:0b:10:02:
                    a5:f6:8f:32:a4:6e:74:a5:f5:12:d6:5c:4b:97:a7:
                    b3:ba:b9:cc:06:c9:c1:e8:ef:28:da:3f:d6:85:f9:
                    62:44:06:41:2c:b1:fd:83:14:0e:24:1f:aa:4c:6c:
                    83:a2:c4:2c:69:b1:20:08:15:f6:9b:8f:76:9a:38:
                    21:96:d5:df:55:cd:27:a3:82:4b:c0:dc:4a:69:65:
                    83:39:d1:91:30:64:2c:a4:07:fe:af:38:50:f5:8b:
                    08:79:f4:2a:31:82:de:7c:65:2a:dd:b2:bd:64:92:
                    c0:2f:f9:5b:45:29:5a:d7:c7:93:7d:5f:0d:70:cc:
                    29:e8:51:21:b6:87:21:e7:9c:62:47:fc:61:ff:3d:
                    75:ab:51:43:56:e3:a3:77:61:37:98:a8:83:7d:8d:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:01:9F:7C:B0:7B:19:71:91:AC:10:7E:8F:AA:27:D7:C1:8F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:52:cd:ff:1b:c1:2d:1d:e4:80:9e:71:76:d4:e8:8c:61:
         9a:9b:84:ad:aa:21:69:4a:ec:15:54:2a:78:db:6c:47:d7:6c:
         4b:ab:f3:c4:11:79:3e:7c:f8:85:16:42:64:ec:63:e0:b6:70:
         87:26:75:01:54:ea:84:5d:95:f3:59:12:95:fe:f0:d1:18:69:
         5f:58:b6:2d:9f:b1:ce:73:3b:77:46:05:f4:55:41:cb:4f:d3:
         cc:ab:dd:88:94:e0:88:e0:fc:ff:2c:f7:63:c4:4c:21:c0:49:
         90:35:f7:8f:be:7c:58:f4:1f:87:0c:00:d1:80:f0:b0:f2:35:
         c2:0f:2f:d5:c7:d2:f4:ef:a5:3d:64:40:41:43:a5:92:69:2c:
         9f:ce:a1:ed:a0:6e:23:d1:99:70:68:52:ff:ca:08:45:fb:b7:
         a0:51:b7:6e:4b:9f:e9:94:2a:06:8b:6c:3d:dc:93:23:93:5a:
         21:45:e5:d8:b2:0f:b2:00:20:35:79:5f:32:2f:1f:18:c1:14:
         69:3b:46:22:ed:10:02:87:6d:a6:aa:4c:38:f7:76:c8:71:0b:
         48:e6:72:53:ba:80:57:94:f5:2d:07:ca:37:90:17:a2:25:ea:
         76:a3:4c:87:4a:3d:0d:d8:d2:a7:62:10:78:d7:cd:10:3e:07:
         f2:5b:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:21 2025 by rpki-client