Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa
File:                     c7104701-4f2e-3aea-861b-63f63faf668f.roa (raw, json)
Hash identifier:          sqjuda5ZosHNCy3vk15xL3m9HkUJMfIoyz2WUCMEhrI=
Subject key identifier:   91:CD:A2:30:08:D7:FA:49:BA:9A:1B:E8:A7:35:36:BB:FB:6B:53:98
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285847FB1A20AD784BB6B519349EC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     272122
IP address blocks:        140.174.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:20:ad:78:4b:b6:b5:19:34:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=551fa5fa-eb3b-4ae4-8130-bf881986e030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:65:31:15:aa:88:68:a8:85:b0:d6:98:41:9d:
                    eb:3f:d5:b1:4c:63:6d:dd:ed:a4:c0:c7:a0:2c:53:
                    f4:c5:91:54:a3:d3:61:42:50:3c:93:0c:58:d3:56:
                    d8:33:d4:41:3e:d0:71:91:bf:2a:ec:56:aa:05:47:
                    d8:0b:cf:87:f1:01:c4:cb:93:c3:e1:e2:01:9d:f1:
                    58:e5:66:7b:e4:63:98:86:25:d4:5c:90:ee:7b:76:
                    d6:65:db:11:9f:e0:7a:b1:f1:31:57:95:db:49:09:
                    aa:9c:5d:ac:f2:87:5e:84:8f:74:25:8e:61:e7:49:
                    28:85:7d:e1:78:69:37:78:64:55:a8:f7:ad:45:1d:
                    01:12:fb:88:ac:c7:27:19:06:b5:5d:3b:41:05:eb:
                    87:b6:1b:6b:af:57:c7:2e:3c:49:03:5c:1a:4f:f4:
                    a7:bc:bb:0a:15:16:75:42:f5:4b:5b:dd:e7:67:db:
                    a0:a4:16:2b:0a:5b:38:2b:40:2d:29:98:29:da:fc:
                    c6:97:31:81:f0:61:66:1a:c4:64:5a:d5:f1:02:83:
                    eb:60:47:b2:d7:c4:f3:1a:95:29:2c:1d:ac:97:b2:
                    fc:ac:88:b9:54:2c:52:ef:26:fd:63:08:eb:50:54:
                    33:2a:40:a5:1e:78:be:aa:3b:11:2f:c6:92:42:58:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:A2:30:08:D7:FA:49:BA:9A:1B:E8:A7:35:36:BB:FB:6B:53:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:fb:7d:7f:c2:00:8c:fe:74:7a:9a:bf:01:b2:96:69:d3:
         ef:7c:56:ad:f5:f4:c7:eb:d3:2c:c9:e9:d5:f1:0f:06:7b:28:
         e5:1b:a2:84:f6:95:50:b3:97:f0:8b:d1:e4:a1:1d:8c:4e:71:
         aa:4c:67:c9:06:ec:c5:f6:44:66:b1:0c:7c:09:2f:c4:ef:49:
         d3:0d:a5:a8:13:75:c8:a1:e6:ae:bb:81:20:e9:73:b8:04:c9:
         3b:41:e0:1c:d6:8d:06:5f:66:77:4d:3a:fa:64:8f:0b:09:08:
         f9:2f:f2:6a:2b:96:17:08:0a:61:d1:8b:87:32:14:60:08:b8:
         b8:bb:ef:d1:2e:f9:e1:f7:68:18:1d:8f:bc:4a:75:8b:b7:b1:
         bc:50:9d:3b:0e:11:b9:60:f1:91:98:85:40:9f:26:5a:7d:7e:
         e7:22:3e:ed:a1:4c:dc:6a:79:4d:3e:91:e9:b2:76:70:d2:09:
         1f:52:73:fb:3f:5f:53:7b:69:d1:03:b2:3b:58:fc:e1:19:e6:
         99:e1:fa:74:41:09:3d:96:07:08:47:7b:cc:7b:10:60:1d:19:
         43:32:bd:6a:09:0b:c3:04:45:1d:bf:c5:15:4d:f7:70:53:a3:
         e2:31:39:33:e4:df:87:51:ba:2d:69:46:e9:03:5e:46:92:8f:
         41:da:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:34 2025 by rpki-client