Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa
File:                     c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa (raw, json)
Hash identifier:          8Nh0TEF27VL8u2fKRac/YCOh/vslQ3czZKyfQUxfKyc=
Subject key identifier:   FD:AB:BC:42:64:08:05:50:27:CC:37:FA:58:03:1F:37:E9:2D:F3:0B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858487755D137D32E76ED2CA3DB40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     22781
IP address blocks:        207.204.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d1:37:d3:2e:76:ed:2c:a3:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=f17b0047-5bbb-41c5-8104-7c5e1abc39db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:69:99:74:c0:16:7b:42:7e:cf:32:cc:b9:
                    e0:08:6c:86:b8:91:de:84:c1:11:b9:d3:1f:60:88:
                    a6:ab:a5:48:1d:96:16:ce:1e:98:d8:f4:b0:c7:d2:
                    c6:7c:33:44:24:08:6d:12:58:3c:56:7d:59:db:32:
                    6f:1f:96:29:e4:7f:a4:e3:ba:23:e4:b8:a6:cd:be:
                    9c:ef:ad:aa:80:ba:95:b9:0e:15:a1:25:c5:46:90:
                    d7:d8:50:d9:35:fb:2a:a8:79:d4:7f:ef:4f:a7:9e:
                    fe:c5:3f:fe:82:71:b6:4a:75:14:89:76:7f:2d:36:
                    ff:4e:b6:d0:1e:76:8a:a4:3c:5f:dd:ea:73:72:e6:
                    cd:86:e3:da:de:b4:49:69:dc:a5:da:4e:02:05:6e:
                    0e:aa:fa:c5:f6:91:f3:43:52:b4:77:ce:43:7a:75:
                    2a:25:e8:11:df:a3:80:25:af:d9:01:a5:79:07:96:
                    e4:d1:87:e4:8f:4e:47:20:8d:25:87:90:8a:b2:d9:
                    68:49:48:82:c3:13:8a:84:77:f5:a5:99:80:ec:25:
                    40:c0:8c:99:c1:43:ba:65:fc:53:25:06:fc:2e:71:
                    cb:92:18:16:54:3c:fd:73:16:2d:10:10:5e:6b:4e:
                    ef:12:d7:d1:ea:fd:6b:19:11:6e:f1:95:10:85:cc:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AB:BC:42:64:08:05:50:27:CC:37:FA:58:03:1F:37:E9:2D:F3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:07:8f:05:4e:d6:c4:ac:7b:68:d6:82:4b:14:7a:68:27:
         0e:5c:2f:a7:ed:ee:c4:63:2f:c1:68:2a:71:00:f3:05:95:b1:
         bf:33:94:4d:de:7c:04:4d:1f:e9:8b:6b:86:10:6d:12:ba:0d:
         97:5a:01:c3:3d:c6:f3:e5:e8:f3:f6:fd:c4:3f:57:df:ef:68:
         4c:21:75:93:7e:2b:83:6e:6a:56:6b:e2:75:8c:f8:b7:2f:36:
         7f:62:ff:df:c3:db:d3:09:74:34:ae:d6:99:17:65:d5:77:d1:
         34:28:99:0a:3a:ec:be:6a:2f:18:a4:e2:20:53:a5:4c:71:13:
         bd:a9:d5:3c:33:ce:47:d5:6b:0c:5b:dc:17:9a:25:c9:0d:06:
         05:09:5f:43:25:cf:78:cd:73:ef:31:3c:42:02:3a:7f:a8:2d:
         70:05:2a:3b:f5:8b:9e:d1:fd:79:c3:92:e2:a5:ab:01:27:cf:
         ef:e5:16:22:ae:51:54:62:58:73:ce:7d:d3:5d:83:9d:68:02:
         ed:4d:95:e6:0e:87:ec:fb:4a:89:cc:43:1a:88:12:d4:f2:55:
         ee:35:57:12:77:bd:82:b2:ea:13:c8:94:a8:66:b2:8d:9d:ae:
         2a:68:21:46:1b:88:e6:c7:8b:ac:07:7f:05:b2:d1:db:73:5d:
         e5:db:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:31 2025 by rpki-client