Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa
File:                     a407ccb2-6152-35cb-88b0-b37aec438e5b.roa (raw, json)
Hash identifier:          jRLpIfOXGGundKoVr+/j0bWBMIYc6tP99eCkGOUqVSo=
Subject key identifier:   63:07:97:D2:C8:68:D1:7E:5A:B2:6D:5D:D8:B9:0F:D8:8E:98:1A:EE
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F4328584882808BF19F96B8A35B7AE740
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     36289
IP address blocks:        128.254.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8b:f1:9f:96:b8:a3:5b:7a:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=ddddfead-4b37-46ad-bdaf-0169a9f14607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:1b:f8:72:b5:d8:49:1d:4f:bd:08:b4:d6:
                    58:bc:18:1f:8a:f0:a4:c4:de:22:3c:ed:cc:59:c8:
                    ee:d8:8d:49:45:e3:d8:2d:18:82:8e:3a:57:ec:bd:
                    93:c9:23:9e:34:57:0e:c3:a4:15:a0:a2:69:88:b8:
                    58:40:b6:c0:f3:b0:bb:3d:a2:b7:a9:90:c4:1f:e3:
                    9f:8e:21:e1:5e:a5:df:19:3c:a6:29:78:34:47:78:
                    a7:4b:52:aa:c7:10:7d:3c:95:9c:d0:1c:48:72:ba:
                    0f:38:63:15:80:24:58:75:cb:67:b5:a8:2d:28:7f:
                    b9:fe:39:09:3d:0b:fc:3c:6a:74:2e:0a:73:b0:87:
                    56:60:26:b9:91:2e:87:47:fe:ab:0c:28:07:f1:52:
                    8b:a5:6d:52:fb:e9:56:25:74:02:4b:4b:cb:b2:75:
                    4f:48:88:f1:f4:75:92:a4:57:61:3b:e6:c1:1c:76:
                    62:c1:93:10:76:3b:9d:20:95:33:1b:d7:1a:4a:5c:
                    cb:59:15:a9:d4:00:f9:ad:31:d1:cd:57:6d:1f:d3:
                    d3:e0:b8:5d:a6:b4:61:47:0c:0b:a8:e1:7f:d6:f8:
                    ec:da:b4:32:af:33:5e:11:e1:2b:b3:1d:b6:b0:ec:
                    c8:67:f1:7b:ac:a6:d9:24:c1:5e:b7:f0:b6:ba:4b:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:97:D2:C8:68:D1:7E:5A:B2:6D:5D:D8:B9:0F:D8:8E:98:1A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:ef:fb:f1:83:2b:1c:ce:fb:0f:b6:4f:de:4e:3e:30:59:
         2d:78:17:39:88:63:84:e5:aa:3f:ff:32:92:60:13:db:7f:fc:
         49:34:54:71:13:dd:3c:0e:90:45:5d:b7:55:cd:2f:b7:ec:b8:
         03:93:80:46:f4:df:a0:e8:c2:c9:b7:1b:a3:70:c3:b6:99:c7:
         06:7d:a9:13:b3:14:3d:64:25:1e:5b:96:cd:e6:5b:78:b7:1e:
         68:db:6f:1a:83:ee:67:97:d6:18:46:0e:cc:b6:7c:54:a8:42:
         4c:14:ba:25:69:ab:0c:10:79:32:ce:2e:8d:fb:a1:73:df:76:
         16:d9:82:da:9a:0f:29:68:f1:ce:93:13:ae:94:75:85:4a:b0:
         b9:26:20:32:5a:e0:20:b5:09:38:43:57:c5:4d:90:e6:49:95:
         69:23:e5:4f:fd:34:cc:12:f0:a2:51:d7:34:d7:82:cd:ee:ac:
         f9:c7:6d:b0:17:50:59:d0:f8:76:8a:82:75:3f:a4:e1:5e:25:
         96:31:9d:83:1a:37:81:0e:58:53:78:77:08:65:24:5e:45:06:
         29:2b:a5:ff:55:f7:84:40:5f:d0:40:c8:17:fc:18:86:a8:27:
         e8:24:9b:31:dc:39:e3:65:be:90:ca:bf:a1:89:0a:6c:96:05:
         94:00:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:27 2025 by rpki-client