Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa
File:                     11f0927b-5083-34cf-84f0-288a063daf08.roa (raw, json)
Hash identifier:          0/YURV//oZxahozm/56lwPLp1dBLhPOJzinO6zxdKmk=
Subject key identifier:   C0:B2:3D:78:80:86:A3:59:B6:98:64:3A:B5:F3:FE:8A:02:26:A3:5E
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584878BB08C45ECAF15277492B80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        209.169.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:08:c4:5e:ca:f1:52:77:49:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=aff25aad-4f6b-4243-9c6b-34269679594d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:9f:18:c1:72:e6:0b:92:9f:6e:fe:ea:ba:
                    c1:ed:47:bb:a3:70:e7:03:7b:42:22:4a:9d:ae:37:
                    ba:ee:d7:fd:bb:e5:2c:d1:ef:03:40:16:4b:35:b9:
                    eb:1a:50:e4:41:30:cd:8c:0f:f5:c5:2c:d2:2d:1b:
                    5a:3c:a2:27:bd:7b:c6:52:94:83:7c:ba:ab:ad:4a:
                    15:16:fe:7e:bb:b1:65:bb:12:e9:18:a2:5c:0e:52:
                    22:2b:44:11:00:5c:cc:30:3c:b6:cb:78:de:4e:36:
                    d7:31:3a:4b:a7:57:4c:53:1a:75:4b:1c:30:d2:4f:
                    ce:91:55:45:38:ab:60:03:d3:61:b9:89:2c:fe:20:
                    05:ac:26:6b:f6:56:36:76:54:35:eb:ec:b0:bb:b5:
                    e5:61:07:ad:1b:6f:59:8c:14:92:c5:9b:e1:f0:64:
                    ae:72:52:cd:13:d4:07:00:d3:9c:8e:41:c5:d1:b4:
                    30:a9:30:81:62:83:c3:a9:ec:1e:5d:79:f7:24:ea:
                    c9:d1:4f:b9:26:7b:00:3f:3b:6c:c6:82:b3:9d:e6:
                    bd:21:fc:ce:14:dc:04:b5:5d:e3:e3:24:12:a2:f3:
                    0e:c6:fa:c4:9f:60:de:e8:11:c8:d1:84:b7:c5:4a:
                    9b:10:eb:fd:34:ba:47:02:22:57:5e:4f:f7:c3:ca:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:3D:78:80:86:A3:59:B6:98:64:3A:B5:F3:FE:8A:02:26:A3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:16:13:10:bd:50:45:33:9f:c4:b4:29:86:dc:a9:eb:6b:
         91:41:2d:cc:b5:3e:2e:2c:cd:a5:a9:98:6f:c9:0f:21:ae:d1:
         71:6e:c8:87:1b:eb:e9:70:f5:16:5a:e8:b7:61:fd:b7:53:3b:
         ee:8e:46:8b:b1:2c:43:38:f2:33:51:ee:39:f2:48:69:a5:10:
         45:65:68:eb:47:b6:a0:a0:b2:4e:80:b1:1e:2b:a4:33:ae:53:
         7e:6d:db:a5:94:37:c7:80:c1:ef:97:e1:dc:9f:53:77:58:cc:
         1e:b8:1a:7e:3e:5f:6c:cc:69:96:7d:5a:55:95:43:b0:23:0b:
         5b:ee:77:aa:c6:e4:99:07:00:f8:e5:7d:40:c4:d0:f6:35:4d:
         a2:79:d4:09:07:01:44:68:dd:be:d9:50:91:5a:42:ab:1e:af:
         62:ed:e2:14:16:ee:4d:ef:ca:35:53:1d:e5:a8:cd:a3:90:78:
         3d:80:5e:13:ee:03:c2:66:9a:f8:d7:27:6e:3c:53:6e:5b:58:
         86:90:49:3b:0b:6d:dd:69:d0:2c:62:45:b8:14:df:bd:a6:bc:
         63:d8:51:09:a5:7b:13:f0:6e:d5:9f:bd:5d:b4:2b:d9:0c:67:
         88:95:22:a8:36:68:d8:7d:68:03:09:d9:08:3d:5e:18:26:a8:
         b0:f9:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:31 2025 by rpki-client