Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa
File:                     5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa (raw, json)
Hash identifier:          CnkwZvz7IaCNV+V6vxBEPaWq4UowCpRAiVALc1392Ko=
Subject key identifier:   91:9B:A1:E6:E9:08:3C:D7:B9:0A:01:D9:D6:F4:EE:BE:DA:A5:D2:27
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848143A8265BA818E65B41C9180
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     3477
IP address blocks:        140.208.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:82:65:ba:81:8e:65:b4:1c:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=111e4ddf-ba01-4646-b8b9-a4ded1014a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:4d:8f:e1:4a:81:87:96:87:2f:d5:ef:af:
                    01:46:19:25:f7:91:fa:ec:74:e2:46:bd:95:3e:f9:
                    3a:93:a7:82:12:b9:46:c7:4d:c8:00:5f:fe:d7:3c:
                    84:1a:fd:b0:de:1e:ad:44:97:91:9f:f8:c6:09:2a:
                    32:1b:92:95:e7:1c:4c:5b:fe:bb:d7:e0:3d:db:04:
                    3d:89:d3:3c:e4:5c:dd:80:73:a3:22:f3:cf:af:88:
                    88:48:1d:8d:2a:ba:8e:1f:51:d2:49:82:20:3e:b0:
                    d6:43:a9:79:07:98:6f:b7:c4:42:3f:91:6e:2c:dc:
                    27:02:71:c1:56:1d:4d:9c:48:03:d3:96:82:6b:55:
                    a1:7b:bf:f8:12:3c:ee:f0:8e:d7:cd:c0:ad:1b:86:
                    7a:4c:55:49:ea:a2:1f:b2:5d:c9:33:f3:e8:c1:53:
                    78:24:cc:a2:d2:a2:47:9f:57:c0:4e:c1:4e:d2:7a:
                    0e:e8:24:b4:1a:4a:3d:dc:20:89:48:f9:37:22:f1:
                    aa:13:8d:b4:f5:ea:4e:66:2b:6a:43:7e:e2:a2:72:
                    82:b2:28:c0:e1:e4:7b:84:55:a9:0b:db:1a:03:d3:
                    c5:69:aa:4a:62:52:06:2e:e2:02:ef:bf:9c:d6:03:
                    12:15:96:8f:05:0f:89:30:e1:9e:c4:31:76:2d:00:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:A1:E6:E9:08:3C:D7:B9:0A:01:D9:D6:F4:EE:BE:DA:A5:D2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d4:cf:97:82:99:03:ea:76:98:61:3b:26:5a:e1:46:01:73:
         7e:67:77:ea:66:96:53:ba:41:1e:b4:5c:11:31:bd:0a:7d:56:
         c8:9d:cc:ed:c0:e9:71:0c:3a:76:b0:ef:f4:1b:cc:ab:15:dd:
         24:72:d8:e8:fb:39:8e:de:14:21:ca:50:ab:30:19:d3:92:09:
         70:bb:ea:ba:3e:5c:03:0a:63:8b:98:aa:f2:07:1e:e5:7d:95:
         fd:c2:32:fc:dd:0d:43:52:90:e5:68:44:8f:58:b1:c4:06:dc:
         49:f4:0f:bc:17:2d:9f:db:fd:f6:e7:fc:09:3a:08:d5:8b:9a:
         3d:9f:2e:7b:1f:1b:66:5d:b0:21:51:55:1f:85:97:23:18:52:
         5c:25:15:9d:d2:c3:56:fd:2b:11:6d:5c:2e:30:90:99:d3:b3:
         9d:2d:fc:44:b2:6a:71:11:f6:22:70:7d:0f:37:2c:50:72:63:
         f4:c0:c2:35:cd:b1:04:86:5a:90:04:31:04:76:39:6f:24:bc:
         85:08:22:94:f2:16:d6:6d:82:21:95:1b:d2:b1:39:55:22:86:
         5d:b6:2f:d8:f5:f0:01:82:d6:2c:d4:fa:4a:34:14:70:fb:a6:
         90:54:45:73:39:88:42:9a:ea:4d:20:b4:17:24:6a:08:a3:e2:
         45:ab:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:49 2025 by rpki-client