Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa
File:                     7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa (raw, json)
Hash identifier:          9fsWpSsz6bGSkbi1maxsHMFoApsw0SgFCOk+Ve4qKeY=
Subject key identifier:   E9:2B:25:97:7C:DE:FC:31:13:22:0B:ED:BE:75:B7:94:2F:74:B0:4B
Certificate issuer:       /CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18
Certificate serial:       010D0C9F432858484515895F18BB110FE4A59880
Authority key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     40860
IP address blocks:        208.93.108.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:89:5f:18:bb:11:0f:e4:a5:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=b38e17e8-9e73-485c-9647-aa7caaa38457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:55:ed:e3:a7:15:0d:13:e8:05:2a:58:c5:
                    f8:37:14:a1:16:eb:3b:85:4e:b0:ce:e7:0f:71:9b:
                    99:f1:4d:61:4d:53:2e:f6:4e:dc:80:38:95:5b:92:
                    36:f5:bd:b1:0c:27:99:a2:d7:27:af:7f:3b:8e:c0:
                    15:10:ff:91:f9:af:11:dd:d1:41:76:52:48:e3:b9:
                    d9:56:9d:17:ef:43:95:3b:ba:35:a6:cf:c2:65:8f:
                    3d:52:34:18:e2:56:44:b8:13:5c:72:d3:34:c2:0a:
                    bb:02:5c:f6:74:85:87:4c:12:19:72:9b:f1:8a:9a:
                    46:8f:7c:41:a2:98:f2:fb:e9:e1:62:74:13:d6:03:
                    e5:73:05:d3:75:4c:9e:c0:2b:a9:bc:c2:67:f5:70:
                    9b:31:4b:6e:76:af:61:6b:5b:85:94:30:a3:e9:a4:
                    e2:1b:0f:60:cb:f5:1e:29:69:d2:fd:9f:b1:b9:16:
                    5b:77:1f:4e:da:8a:9c:3c:a4:90:4b:a4:65:0e:93:
                    de:5c:7d:4b:28:ac:14:a2:90:a1:dd:d0:b7:ed:33:
                    3b:ab:c2:9c:14:4f:b0:e0:eb:34:93:0f:d7:c2:94:
                    0c:7b:d3:c0:f0:ae:34:2d:27:31:62:44:b1:f3:73:
                    d3:4f:b2:61:11:91:9c:36:b0:62:00:bb:aa:e9:cc:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2B:25:97:7C:DE:FC:31:13:22:0B:ED:BE:75:B7:94:2F:74:B0:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl

            X509v3 Authority Key Identifier:
                keyid:83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:a9:3c:3e:c0:f9:04:2a:de:bf:52:0f:e9:c3:57:6d:70:
         83:ee:37:9a:c5:e9:13:85:d5:8e:8b:c3:8d:22:c6:d0:24:55:
         09:c0:d7:47:6d:2a:f7:30:ac:1d:ec:d9:8a:5f:0f:fa:d8:ba:
         47:23:48:e5:0a:d4:f2:83:62:f9:55:b4:a9:e5:dc:4f:dc:13:
         3b:4e:03:3e:ee:d3:01:75:be:02:32:a3:14:51:26:0d:92:3b:
         03:fb:11:d8:1e:81:5f:f1:6f:d2:a8:21:d1:32:21:d2:2f:d8:
         2a:9c:1e:0d:68:e6:73:da:31:7a:eb:b9:a4:3e:8b:58:f6:87:
         10:84:0f:95:b9:00:1a:d3:6f:d9:ee:57:54:f9:b4:bd:44:7a:
         c6:df:9b:48:58:0b:6d:7d:e6:4d:ff:6c:43:3a:b1:44:b7:d8:
         ba:4a:b2:45:ae:bf:08:47:5c:e3:98:94:69:f5:9c:2e:74:57:
         32:ef:1c:bd:f9:ab:fd:75:fc:aa:9e:e3:0d:b5:07:02:1d:44:
         ca:44:80:1d:a2:d2:58:45:39:c0:4f:0d:fd:3b:ca:e7:bc:e3:
         ea:33:64:d4:44:10:51:be:e6:e0:5e:8e:cf:27:80:11:d7:8f:
         ab:45:da:88:2f:0a:13:4f:cc:d7:90:7f:05:10:2d:a6:f2:6b:
         09:88:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:00 2025 by rpki-client