Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
File:                     b7fb26c9-27d4-3d17-b963-60799756d2e8.roa (raw, json)
Hash identifier:          BZBVf5mRzZyJDFtZWAQRv0IF61Lp9JdSKaIYZ/8/0YU=
Subject key identifier:   4E:30:E0:BB:24:0B:A8:3B:FC:91:91:13:6B:74:E0:F3:52:56:98:8F
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F4328584867FAE9A07DDCE54B5A47ED00
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
Signing time:             Thu 02 Jan 2025 02:00:39 +0000
ROA not before:           Thu 02 Jan 2025 02:00:39 +0000
ROA not after:            Wed 02 Apr 2025 01:00:39 +0000
asID:                     6079
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:fa:e9:a0:7d:dc:e5:4b:5a:47:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Jan  2 02:00:39 2025 GMT
            Not After : Apr  2 01:00:39 2025 GMT
        Subject: CN=6e417c1e-d3a1-4e7e-b9ed-99b2e2db21ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:3d:75:d3:0f:28:56:39:0e:10:71:c4:3a:
                    3b:a5:f2:a1:ca:0f:c3:cf:af:9d:3d:fd:e5:88:3d:
                    22:61:3e:56:7c:ec:42:07:30:e1:5f:48:53:a7:32:
                    f1:34:ea:fa:8e:05:b7:fb:f7:36:af:2a:45:cb:66:
                    c9:a0:3b:41:a7:67:a7:d7:25:92:ed:2b:6e:cc:e7:
                    46:d4:c2:b7:d9:ac:bf:d6:79:8e:6f:95:e3:65:8d:
                    5d:df:ff:83:92:ce:46:52:ab:eb:2f:3f:af:2d:2e:
                    3f:50:2d:b2:f2:73:a2:7c:41:de:33:86:67:9f:1d:
                    ed:b3:17:93:53:08:40:6d:f1:c2:cb:07:ff:24:76:
                    c1:76:78:f2:b5:c3:7c:72:a8:7b:7e:fd:9d:68:34:
                    02:77:ae:c2:22:a5:88:49:7b:21:2d:18:f9:43:b4:
                    3e:3a:12:71:d0:75:67:1e:b5:82:6d:76:8c:8a:bb:
                    5b:c1:95:57:5c:9a:7f:b9:68:4d:65:04:d1:7d:ee:
                    6f:75:63:91:c9:da:30:7d:c4:fc:35:ab:5f:68:b6:
                    14:c5:15:0a:ec:1b:17:6e:eb:8b:13:3f:ad:0d:8b:
                    00:ca:61:09:63:51:df:f5:78:dd:8f:8b:ea:09:7f:
                    77:97:0c:a2:a5:28:f4:3e:0e:c4:20:70:31:5a:ea:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:E0:BB:24:0B:A8:3B:FC:91:91:13:6B:74:E0:F3:52:56:98:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:32:ef:99:0b:96:b7:cc:c4:ec:57:df:e2:75:41:46:1d:
         90:c2:54:22:d9:00:ac:3a:4b:5a:31:d6:da:7a:05:28:3f:bf:
         ac:e3:c0:97:c1:4a:a7:58:37:cc:0c:cb:b4:54:c7:bd:a0:d7:
         d1:be:6a:94:bb:00:8f:2a:e4:cb:f4:04:2b:c4:8e:e8:14:e0:
         84:4b:1d:91:fd:06:ae:eb:a8:f9:80:4c:9d:20:d3:4b:c1:54:
         74:80:c3:18:ca:fe:56:a9:5d:2c:98:de:38:9a:ff:b2:ea:09:
         33:c0:90:c2:c1:8a:f1:c1:ce:2f:9c:08:95:6d:74:ec:9f:2d:
         30:9f:b6:06:4c:c2:4a:99:b4:64:3a:9c:36:d7:b6:96:fb:a7:
         53:46:a9:a4:f9:91:e1:ca:03:cc:a9:c6:2b:a4:4e:3a:01:58:
         3f:2d:1a:71:0d:83:30:fa:89:f4:8d:65:72:a8:5d:28:7e:bf:
         ae:d5:c4:27:0c:8c:de:ee:a9:2a:01:80:3b:cf:1a:fa:8d:97:
         03:bd:84:60:a5:a1:ce:f4:91:0c:73:f3:68:22:9f:47:58:27:
         2b:c4:2c:28:8a:62:9e:9b:dc:03:71:c0:89:b4:14:84:27:0c:
         bc:cf:69:cc:b8:74:a1:b8:43:b9:aa:d5:27:70:52:e6:9e:7b:
         65:a3:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:10 2025 by rpki-client