Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa
File:                     a25da213-0d7e-3813-aab1-7137753f8c5f.roa (raw, json)
Hash identifier:          lXBAD/0qWwiHF+DRtGfoyrl2rjJGxLpO65dXYkn4UC8=
Subject key identifier:   53:0D:B3:E1:03:6E:CB:C1:D0:E6:76:1D:A0:0E:A0:BE:52:F4:DE:66
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858484C1016039782EB93784E33E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     203
IP address blocks:        20.137.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:16:03:97:82:eb:93:78:4e:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=08a23744-a7fb-4399-ba6b-0e862a110e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:1a:7e:d8:bd:95:5e:61:64:ce:ca:66:f9:
                    27:61:ff:b3:91:60:ff:fa:a5:e9:16:53:66:4c:9c:
                    c9:56:b3:a0:82:29:c4:23:9e:aa:d5:81:6f:fa:f0:
                    dc:e6:ff:6a:d0:be:01:f8:db:2e:42:56:f5:41:0b:
                    26:fe:db:8d:b1:3b:63:0d:a6:1f:5f:2b:26:9b:a8:
                    6c:8c:21:ca:68:11:fb:f8:68:f0:c8:39:2f:ee:48:
                    7f:b3:80:c7:b0:4c:9d:11:ad:d6:77:26:f2:a3:c8:
                    09:30:05:31:9e:b0:5a:f5:2f:27:ef:42:df:fa:79:
                    df:27:20:b9:18:97:0c:50:42:63:6b:51:61:dd:a6:
                    e6:90:2a:fc:e4:92:18:e0:11:66:f8:dd:61:0d:da:
                    8f:d5:12:1c:ca:50:31:af:71:e7:e6:a1:59:f3:9b:
                    21:95:9e:4f:d6:e3:84:55:64:3f:bb:46:c3:73:26:
                    49:f8:d4:2f:2f:24:e7:5d:e5:b6:9b:2e:4b:e0:91:
                    ea:63:9e:6c:4b:23:dc:82:78:e0:7f:a7:c6:ac:66:
                    8c:42:3d:2c:12:8b:bd:09:ca:9c:a0:5a:95:89:7f:
                    68:1f:29:40:ec:f3:cd:91:7f:52:ed:ec:b2:01:6f:
                    7b:17:ff:e9:ed:6f:d8:9b:ae:06:4c:d7:85:7c:04:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:B3:E1:03:6E:CB:C1:D0:E6:76:1D:A0:0E:A0:BE:52:F4:DE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:a2:51:c0:0e:2a:b9:59:79:7c:e4:e0:03:51:c0:b1:a6:
         4d:ca:94:cf:a5:bf:44:e8:4c:d1:5d:b2:5b:3c:7b:f9:a6:78:
         2b:a2:78:c6:98:09:5e:d4:e2:72:1b:9d:81:16:68:e4:36:69:
         09:19:ea:c6:0c:52:fc:12:13:40:eb:28:20:71:c1:cb:10:ff:
         65:7c:58:87:02:d7:4c:ff:b3:97:01:5a:4a:1a:98:3c:23:26:
         ea:76:a5:a4:de:b0:34:a6:cd:42:e0:fd:e0:c7:b1:d2:1f:25:
         d0:2f:45:1b:1a:77:80:92:0d:66:72:c1:f5:91:00:b5:a8:d2:
         76:54:06:66:fc:54:13:88:55:b6:15:ce:8e:07:d3:8e:b5:86:
         78:16:99:19:e3:07:b6:00:3e:33:0b:45:7d:9e:98:9a:f7:fe:
         d9:59:16:12:55:88:4e:0a:89:f9:ab:94:cd:56:6e:bd:ae:55:
         69:70:e0:20:f9:68:62:29:22:24:88:d7:f8:91:11:6a:29:72:
         c0:e3:e6:7f:95:73:ed:81:e0:ae:c8:c0:2b:d2:12:76:97:13:
         23:ea:29:c7:c9:69:47:cb:28:b7:d8:71:54:34:05:15:25:fc:
         16:b0:14:b3:ce:ec:1e:68:1f:04:36:2f:57:cf:fb:78:e5:52:
         eb:43:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:36 2025 by rpki-client