Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
File:                     88cfb93c-155c-3b0d-be04-aa21f30fa493.roa (raw, json)
Hash identifier:          AvoMffRgqqRKQIdWWyiDKFzUDs1MdSL/JWSYHH6T6nM=
Subject key identifier:   FA:8D:E3:80:06:F9:B8:3D:92:B2:3E:47:3E:5F:1F:D6:1B:FC:AC:5C
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858487A207C4AD1BB04462EDBFE40
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     395638
IP address blocks:        35.62.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:7c:4a:d1:bb:04:46:2e:db:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=92f11fc2-30be-48f3-90e4-cc54f0c27a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:c7:a1:30:3a:d6:a5:56:0d:ce:92:65:5a:
                    16:bc:6a:00:10:2c:2f:bd:e4:ee:4f:cd:1a:e8:93:
                    ab:01:e2:29:fc:5d:13:cd:10:46:c5:fb:01:cd:cc:
                    82:67:a4:85:13:91:e7:a6:7d:9e:f3:f0:e0:63:90:
                    07:67:77:7b:a5:c9:ba:14:b3:2f:c9:a7:b8:ec:85:
                    4b:22:11:ca:9a:c4:58:cd:f9:bb:48:57:bc:77:01:
                    91:13:d4:90:0a:f5:e8:29:d4:a8:f3:fa:0d:0b:4c:
                    20:03:41:ec:d2:ce:6c:9c:0b:7c:94:a7:56:f6:f5:
                    c4:65:b3:16:f2:bd:28:bf:c7:b8:58:bd:37:0c:3a:
                    43:d8:0f:15:05:dd:36:5b:bb:90:61:23:5d:53:9c:
                    5e:44:d4:1a:4a:8c:0f:01:76:e5:c3:32:d6:d2:3b:
                    bb:79:63:57:7d:6d:5e:17:6d:06:2d:ce:f6:61:8d:
                    7d:82:65:a3:20:6e:3a:0d:9b:c4:3e:d1:c8:d3:7b:
                    14:1b:d6:ab:41:e8:64:2c:03:30:c6:9b:9e:78:bb:
                    be:1e:81:7e:73:80:3d:e6:ab:c6:07:9f:fb:20:ae:
                    2e:ea:0e:8c:5d:f3:2b:b0:21:17:02:15:ce:ee:5e:
                    9e:da:a8:59:b4:c9:26:f3:d6:c8:34:0c:08:d0:94:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8D:E3:80:06:F9:B8:3D:92:B2:3E:47:3E:5F:1F:D6:1B:FC:AC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:7d:d8:ec:60:e3:bd:89:43:fe:41:8f:24:47:fa:c8:96:
         1a:38:2d:ce:20:4b:d6:d5:9e:e0:ca:6c:e5:2a:b1:b6:87:61:
         a1:cc:21:47:a0:5a:d0:4e:b5:75:36:ab:9b:4a:c6:4b:87:92:
         77:de:b6:8a:55:fc:23:52:0a:b1:c0:b6:70:fc:1a:5e:32:da:
         fa:f1:54:1f:bf:62:8a:9c:ce:57:1d:01:a9:ed:60:8a:cd:f8:
         4c:6e:33:d1:8d:25:d2:19:c2:36:dd:e2:c8:eb:13:1e:ec:22:
         fe:bc:48:60:23:83:ad:91:24:9b:40:89:ba:06:ba:1b:85:ab:
         2b:f1:f6:bf:e6:1e:0f:37:d0:c4:03:ed:2e:bc:f1:2a:b1:59:
         24:91:10:04:13:fa:22:b3:01:8b:71:27:18:ed:91:70:5b:21:
         0e:08:fe:53:ec:09:db:fa:83:28:96:e2:af:62:ef:84:12:45:
         71:ef:c2:04:b2:21:0f:68:b2:1f:f4:5f:54:8e:af:a5:0a:d0:
         fc:2e:cd:a4:b0:5c:c4:f7:a0:a7:b7:43:19:cb:fb:48:21:30:
         0a:8b:67:02:b4:7c:73:bf:7a:bf:23:b4:b8:24:ca:1e:1c:1d:
         cb:3a:a0:71:18:f8:75:18:57:8b:3d:1d:26:eb:26:45:19:0e:
         1e:3b:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:42 2025 by rpki-client