Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
File:                     6978a815-9a53-3f80-abe8-e211e21209d4.roa (raw, json)
Hash identifier:          Jz+xhhDFolDDHi8xbJoZGZwtvSfqRHL74psRzMhDnsw=
Subject key identifier:   62:E7:90:88:3E:42:C7:C6:2C:8F:A7:08:7F:42:BE:3E:63:85:1F:20
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA6A466E70061949E6300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a6:a4:66:e7:00:61:94:9e:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=280da49b-42d8-40dc-b1f6-62d663b13cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:21:45:bb:3c:d5:10:a0:a5:62:57:8a:1d:
                    85:71:6a:33:a9:37:05:1e:e9:de:19:19:0f:fd:b4:
                    52:c9:5b:93:c4:6c:8d:f6:18:a7:78:74:c8:f4:58:
                    30:64:d5:63:f7:24:08:94:5a:46:28:fa:ab:79:a8:
                    ba:31:6b:29:23:b6:f9:03:11:6f:ea:10:32:07:bb:
                    8f:80:19:8e:30:9d:43:61:d4:7d:35:bf:fb:a9:30:
                    2d:8f:35:76:76:d0:cc:66:0c:8e:35:8c:fd:ca:45:
                    07:6f:22:39:30:86:10:5b:ca:a3:31:cc:46:be:52:
                    20:08:35:90:59:9a:3e:76:43:21:f0:1d:33:7e:b1:
                    ea:93:d2:e5:22:d0:a8:6e:5b:f8:dc:b3:b5:cc:69:
                    bd:f5:57:1e:27:2a:ec:e4:8f:24:59:a8:6b:03:14:
                    12:25:02:2f:f7:18:5b:77:6a:1e:2b:80:ce:24:b4:
                    77:e6:67:bf:b4:f6:0d:a8:04:4f:c6:dd:df:8f:66:
                    4a:5f:eb:44:74:df:67:1e:78:de:e4:dd:a5:97:f9:
                    61:f6:fa:38:4d:d5:7f:df:7c:7b:7e:16:36:f2:e6:
                    9a:8a:7b:af:b7:bd:5a:13:0e:2f:9e:28:e8:a3:12:
                    3a:57:d3:2f:5c:5f:bc:3d:11:a7:da:8e:f8:e9:f3:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E7:90:88:3E:42:C7:C6:2C:8F:A7:08:7F:42:BE:3E:63:85:1F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:a2:8f:6b:b7:da:72:48:7f:14:90:6f:0e:a7:50:6a:6d:
         f0:b6:31:f9:62:50:6e:d4:28:be:3d:d0:1f:9c:0d:d0:5e:fb:
         26:02:67:2b:43:e8:88:38:17:aa:2c:f4:6f:af:de:b9:db:8f:
         46:c6:3d:2e:d6:a0:e1:64:e9:66:85:80:d8:8d:af:e7:8e:44:
         6d:7a:97:2e:c4:bd:71:49:24:00:da:f0:90:da:d2:c2:17:0b:
         cd:2c:14:46:0f:94:c7:93:66:1e:04:72:bb:34:e4:21:db:d1:
         57:2f:7f:6c:03:d5:d7:2a:d1:fe:ce:09:c7:7a:3c:2f:0c:9f:
         9d:c0:bf:f1:64:1d:0d:29:c6:19:29:ab:c6:4d:96:a3:1c:5f:
         b8:dd:87:ad:3d:01:bb:ce:ac:a8:4c:bf:1e:10:c3:88:60:e9:
         18:6a:87:45:bd:b5:99:68:ec:b6:bf:f1:f2:a3:6f:d5:7a:48:
         c1:3e:50:1b:18:35:a8:89:81:17:24:8b:98:35:0e:26:c6:80:
         6a:9c:99:90:13:6e:00:2c:a4:20:1e:a5:7c:2d:38:08:80:f3:
         b3:ca:5c:39:3f:00:c5:55:24:e8:43:5c:bf:56:4d:4a:01:b2:
         59:b7:ff:64:e9:bf:6b:9a:65:70:62:20:b3:c1:a6:02:19:d3:
         03:0e:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:35 2025 by rpki-client