Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
File:                     59e7face-109a-3046-80f2-18e812612b71.roa (raw, json)
Hash identifier:          bjMLA/l0IdGqV25j9pD8VPaL5tqmYleGP5jIGa29nGc=
Subject key identifier:   E5:EA:B6:97:F5:60:50:01:EB:D0:B4:24:81:8E:3E:51:AA:84:84:37
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858485CD03609924FB4A07544DF80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     394089
IP address blocks:        140.209.192.0/19 maxlen: 24
                          140.209.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:36:09:92:4f:b4:a0:75:44:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=5bb9aeed-87b7-45e6-bc88-f7b3c8c7b058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:46:56:2c:ef:5f:2b:27:0e:07:ec:64:8e:
                    6f:95:f8:1c:44:16:90:9b:49:24:51:a3:89:4c:b1:
                    e0:f3:1e:28:00:a1:d8:93:d4:c9:c7:0a:d0:8b:80:
                    6f:4a:d6:07:eb:2b:7c:74:58:1d:29:db:bf:42:b0:
                    e3:da:f2:a0:43:e6:1b:82:37:f8:f0:0a:72:34:f1:
                    ab:b6:a6:be:45:87:4f:31:13:7f:a6:79:39:1a:1e:
                    4a:cc:3e:06:90:33:77:1f:66:96:d8:93:39:37:d1:
                    25:a2:19:71:47:00:b6:ba:d7:5e:7c:31:e3:99:d0:
                    e5:5d:13:8b:98:21:24:78:3e:b2:ce:d8:7f:17:b4:
                    95:6d:07:a0:99:8a:83:34:3a:35:ce:bd:5e:ec:c4:
                    6f:4e:47:fb:d1:3d:3b:55:b7:e0:2a:67:86:19:8d:
                    5f:7b:bb:97:6a:5e:4b:a9:12:9a:75:45:93:03:a2:
                    43:c3:bd:ef:45:88:8d:6e:a6:a6:9a:55:90:d7:85:
                    ae:38:5f:25:0a:08:04:97:32:bd:4b:d9:83:64:72:
                    58:c9:fa:50:a8:de:ed:f2:cb:a9:08:2d:b0:e0:d2:
                    7c:a0:8f:d0:c1:33:f2:cc:e0:e0:a4:c2:0f:20:8a:
                    ba:93:f8:b4:3e:17:30:b0:25:2c:42:60:b4:b8:ea:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:B6:97:F5:60:50:01:EB:D0:B4:24:81:8E:3E:51:AA:84:84:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.192.0-140.209.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:9c:d8:8c:88:7d:a3:df:32:b9:17:48:1f:b7:5c:8d:62:
         df:e0:8d:60:b0:a9:19:be:91:f4:8b:50:c7:a4:6d:00:cd:26:
         77:a9:93:48:7a:b1:aa:b2:79:33:5a:64:ce:1d:62:f9:84:d0:
         78:80:a5:a3:fa:a7:79:f2:25:40:2e:52:dd:bb:bc:43:fa:28:
         4f:f6:33:c2:22:33:72:fd:97:2c:ae:d4:a8:e2:bb:c1:d4:9f:
         1d:3b:ff:da:93:55:91:6c:ac:30:ff:61:45:b5:ca:fd:06:15:
         11:2a:1e:94:3c:b4:36:c7:37:9e:b2:46:20:ef:f1:e2:84:d4:
         22:d4:a4:54:b4:7d:dd:a8:28:e0:81:ef:d3:8b:76:19:21:96:
         45:f3:de:0c:32:c0:a4:20:e4:b4:66:8d:71:8a:02:47:88:35:
         84:e6:4f:04:ba:85:01:a1:bc:e9:3a:4b:06:74:ae:41:36:66:
         c4:8f:6a:1f:f5:e7:75:fe:5a:df:a3:1d:48:6d:59:10:80:1a:
         27:24:20:57:11:5c:bc:82:ed:a0:d1:cd:7a:1f:66:78:6b:43:
         a7:0f:58:8f:d5:3a:cf:04:97:d6:89:38:3c:a4:1f:55:03:0e:
         ff:c4:fd:69:03:19:f2:bc:72:dd:01:4e:8a:42:67:65:7a:f8:
         23:ea:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:44 2025 by rpki-client