Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26ffd32e-8b5d-37e7-80f8-af643fd9700f.roa
File:                     26ffd32e-8b5d-37e7-80f8-af643fd9700f.roa (raw, json)
Hash identifier:          Cd4KkGjj6rXF6m5pDVQtLDWU46gPc+MW03RxJfCr8Ws=
Subject key identifier:   E2:5B:E8:60:5A:BB:9A:46:6F:34:CD:AF:0A:53:84:8A:A7:4E:F0:6A
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848911A002951CC3C2E9771AA80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26ffd32e-8b5d-37e7-80f8-af643fd9700f.roa
Signing time:             Thu 16 Jan 2025 19:31:29 +0000
ROA not before:           Thu 16 Jan 2025 19:31:29 +0000
ROA not after:            Wed 16 Apr 2025 18:31:29 +0000
asID:                     12132
IP address blocks:        207.96.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:1a:00:29:51:cc:3c:2e:97:71:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 16 19:31:29 2025 GMT
            Not After : Apr 16 18:31:29 2025 GMT
        Subject: CN=fa632df0-baa0-403f-bb89-9c32cb6dbecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:39:d4:3e:32:01:44:ee:b5:f3:c7:2a:4c:
                    22:89:42:1d:33:66:05:1d:54:48:47:9e:47:4a:0b:
                    00:c4:c8:7d:dc:73:e7:a2:47:53:f6:9d:a7:5a:eb:
                    26:c9:ed:a7:40:f3:95:5d:7f:3a:c8:82:e8:d5:d0:
                    66:c5:da:13:f3:2e:ce:31:58:e0:99:18:e7:8c:38:
                    1a:2f:78:d7:e3:32:80:fe:77:32:7e:46:0f:67:79:
                    d0:39:47:7d:44:03:35:89:c5:06:1f:97:0f:75:61:
                    da:39:0a:21:74:1c:3b:3a:a5:75:ec:27:6a:0b:53:
                    62:24:8c:55:58:07:b6:33:72:90:01:b4:6f:d7:ed:
                    b1:12:13:67:c1:3e:19:9d:49:a9:28:9d:62:62:cd:
                    18:62:63:95:f1:85:8d:0c:de:f2:8c:00:7b:7c:2c:
                    95:1e:e5:0c:8d:8f:24:00:4f:f7:e1:01:b8:b4:9e:
                    95:b6:f9:9d:45:05:06:e0:98:be:a2:08:61:cb:9b:
                    9b:d3:53:43:9c:b6:cd:75:98:b1:38:10:c6:d1:5a:
                    42:85:a2:31:f4:ac:92:da:84:b4:ea:2b:5d:26:45:
                    be:97:cc:99:3e:05:37:09:01:e5:08:96:67:2b:2c:
                    16:dc:f3:45:b6:6f:f2:62:4d:64:0b:e9:e4:f2:43:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5B:E8:60:5A:BB:9A:46:6F:34:CD:AF:0A:53:84:8A:A7:4E:F0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26ffd32e-8b5d-37e7-80f8-af643fd9700f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:b2:a0:e3:02:57:a9:67:3e:80:9c:8e:98:f7:f4:f5:b7:
         84:8f:f2:7a:38:da:13:f9:b4:58:b3:b0:cf:5c:46:16:aa:29:
         3e:64:39:b6:1b:c0:8b:c2:bf:b6:cd:c0:1f:07:d8:25:6f:df:
         7d:ff:a5:1d:3c:65:79:6d:ee:71:05:87:47:2d:77:5c:b8:fe:
         d7:c0:f2:65:af:dc:83:28:b6:f3:64:e4:9d:3c:33:cc:f8:7e:
         ff:c1:6e:61:c6:7d:21:c9:8a:88:d7:6d:71:cb:80:9a:81:dd:
         7a:3c:3b:61:0f:71:47:26:11:1c:db:b4:0f:c9:93:9e:12:9a:
         28:b0:9f:bc:03:46:f7:cc:92:04:36:c9:16:35:26:0c:0a:94:
         dd:5b:14:18:47:f5:21:8a:00:5f:55:48:ad:b1:73:60:66:8e:
         2e:0d:3d:c9:19:aa:53:41:25:cd:bd:98:81:67:84:ac:9f:9f:
         8d:f1:f4:b6:ad:6f:be:89:3d:f6:d7:e9:ea:88:7e:a6:d2:40:
         0b:8a:79:ef:14:21:71:d1:9d:21:49:3d:ce:b4:5a:ba:7f:46:
         34:ca:fa:bd:f8:12:9b:45:32:fc:01:3f:64:8d:21:48:a8:21:
         8f:d9:f4:1a:2d:29:67:d7:43:d4:fc:39:fa:3d:86:91:95:90:
         ab:21:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:35 2025 by rpki-client