Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa
File:                     e93effbb-1736-3ee1-a8ff-71584d7543c1.roa (raw, json)
Hash identifier:          VZM57NpsrfssAhyVVmPT+lMjRjp27/U9W17hHy53hlk=
Subject key identifier:   2E:E4:D0:78:49:A7:71:73:4B:BC:EB:08:AC:55:47:97:56:CF:D8:64
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F432858488036C493A10CE701C2E4C580
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa
Signing time:             Fri 10 Jan 2025 18:20:42 +0000
ROA not before:           Fri 10 Jan 2025 18:20:42 +0000
ROA not after:            Thu 10 Apr 2025 17:20:42 +0000
asID:                     22652
IP address blocks:        199.167.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:80:36:c4:93:a1:0c:e7:01:c2:e4:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 10 18:20:42 2025 GMT
            Not After : Apr 10 17:20:42 2025 GMT
        Subject: CN=7cab4e9d-1cfd-46ab-9470-ab251d565bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:25:72:bc:b9:2d:03:6d:36:04:3b:87:da:
                    5a:bd:e9:c6:1f:16:b1:48:b8:aa:3f:25:59:5b:56:
                    63:db:a8:29:7b:ae:15:e4:09:21:bc:b5:04:47:13:
                    3e:3d:3e:41:6c:4f:f7:ff:32:4b:be:53:c5:4c:e8:
                    c2:71:14:fc:d5:e7:fc:3b:be:4b:24:25:97:0b:14:
                    b9:09:6a:6e:78:9b:53:4c:19:77:03:33:b4:f3:61:
                    28:b4:db:da:da:8e:ad:d7:ac:0b:b8:ce:80:dd:a6:
                    7f:08:3e:f7:e8:9f:21:66:50:df:f5:64:ca:72:2d:
                    15:ba:ec:00:fe:0a:48:98:ce:92:8c:30:c2:20:fd:
                    96:c7:48:67:f7:8b:39:3e:29:cf:40:4a:ea:ac:82:
                    f0:d1:98:84:b4:b1:b6:80:3a:e5:79:fa:e3:b8:a9:
                    c1:4a:cc:e8:45:c4:d1:b4:19:dc:c8:f3:f4:2a:63:
                    5a:3b:a2:85:aa:b4:a2:b1:1d:4a:2a:46:0f:c8:36:
                    ca:3c:79:71:c7:ad:5a:9b:89:4c:d5:5a:81:68:da:
                    5d:4f:8d:10:f7:bd:63:c3:80:1f:4c:5e:83:f8:c4:
                    8e:12:02:28:2f:44:6a:b6:61:21:e6:98:6a:17:2e:
                    0e:6b:26:39:67:f0:7d:c5:ec:3c:b6:50:fd:16:4c:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:D0:78:49:A7:71:73:4B:BC:EB:08:AC:55:47:97:56:CF:D8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:9f:04:df:d7:61:73:02:37:7f:fe:5a:07:03:9f:11:72:
         e0:0e:de:0f:c4:ad:8a:74:10:8b:e1:ca:b9:98:88:c9:fc:19:
         a7:33:b3:8b:22:06:49:3e:b5:14:06:11:6f:f0:f5:21:e1:4d:
         b4:77:e1:64:b6:3b:36:4d:bb:21:59:16:cf:68:9f:9f:1f:8a:
         6b:6b:89:58:8b:65:db:bb:f4:15:92:e7:9d:bd:58:99:6f:e2:
         13:3b:4e:2b:66:ef:50:c9:50:86:85:ab:02:e8:de:de:8f:f0:
         85:95:01:f3:4d:4b:87:64:79:1f:1e:03:f4:de:f0:2a:6c:b2:
         ab:c7:e4:55:53:47:aa:df:16:74:c0:4d:10:eb:a7:c0:2c:e2:
         44:87:2a:c2:e4:ff:7d:52:5d:d0:01:61:9f:cc:ed:c3:ae:64:
         e9:4b:32:2a:ce:a3:90:85:fe:db:1f:f3:f3:90:e6:a8:c2:f9:
         cd:c0:95:f9:a3:2a:2d:a1:21:0d:f2:79:62:3b:10:90:18:01:
         b7:5e:fd:e9:f6:d7:ae:ff:76:af:e7:c9:61:a6:8f:51:04:bf:
         ca:cb:c7:19:d2:73:68:6b:86:1d:4c:46:d1:05:b9:b5:e8:a4:
         00:bb:42:e2:12:1d:ba:e3:c4:9c:b2:3c:51:82:5a:a6:be:6b:
         cb:53:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:30:09 2025 by rpki-client