Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
File:                     dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json)
Hash identifier:          SR7+0i3G6kUDDzx0KDoqxgjxRsxmZEkUd7s9tS7SB/Q=
Subject key identifier:   C9:EC:CE:13:7A:FF:2F:A7:52:8B:71:B4:E5:60:20:EE:97:4C:01:64
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F432858486695C2F366C352CF4FC115C0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     11248
IP address blocks:        204.8.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c2:f3:66:c3:52:cf:4f:c1:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=fba65380-e55f-4bf1-99fa-ae52d6f13608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:98:2f:3c:10:dc:f9:48:46:82:09:c8:65:
                    c1:a9:8e:69:73:29:3a:69:0c:05:cd:05:0e:74:90:
                    e8:cf:89:e8:07:37:8c:50:b4:fb:b8:a6:9b:60:a3:
                    09:c9:18:a6:c2:92:b1:5f:2c:82:26:cb:60:64:c5:
                    ad:ce:f9:02:ed:43:f7:12:73:81:e4:ac:25:05:32:
                    73:f3:12:87:70:59:17:5c:3e:bc:a5:3a:62:7f:b1:
                    4d:94:fc:2f:c7:f8:c4:df:4b:2f:1e:02:48:8e:75:
                    3c:6b:30:e3:69:fa:1e:29:75:f2:28:c8:df:37:3e:
                    2c:a1:dd:28:ce:8f:b5:4e:b8:3b:bc:42:fa:4e:e3:
                    ae:5b:39:75:31:6a:8f:0c:a6:c5:b0:51:66:30:6c:
                    3b:69:4b:0b:7e:b8:04:4c:da:fe:e6:fa:3f:42:ef:
                    b9:43:05:8e:42:87:a9:34:02:d9:ca:b1:4e:c0:f7:
                    e0:8d:54:85:08:2f:3a:ad:dd:55:aa:00:80:a7:da:
                    1b:27:f0:ad:07:d2:ee:09:2b:56:50:69:01:3c:7f:
                    21:05:d7:a5:82:3d:cf:98:16:e5:32:8d:19:f4:5e:
                    70:f1:57:4b:57:ff:e4:a2:62:86:a0:e0:31:3f:3d:
                    c5:0f:b2:d1:25:a5:ba:09:54:2c:3f:26:8f:e5:3a:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:CE:13:7A:FF:2F:A7:52:8B:71:B4:E5:60:20:EE:97:4C:01:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:17:81:51:ab:f3:46:20:21:6e:96:14:e7:bf:8c:02:82:
         fc:9e:73:56:e1:47:b1:1f:97:e7:31:22:d1:dc:58:e8:bb:02:
         d5:7f:e2:48:45:e7:a5:47:b5:31:da:e8:03:fd:68:cf:ac:f9:
         6f:58:53:d7:cb:99:f7:01:27:fc:40:44:dc:27:56:01:2f:71:
         04:7c:5c:e9:00:dd:96:c5:89:cd:4e:50:c5:c9:3e:96:e3:83:
         00:d3:c1:cb:d2:81:0e:87:41:e4:a0:f0:a4:de:71:12:d6:b2:
         0d:b3:10:c9:49:ee:8d:5f:e8:ef:47:21:eb:05:22:fa:11:59:
         a0:94:7d:06:31:54:45:e0:cc:c1:68:dc:c9:ba:7a:02:af:6c:
         0a:28:c7:8c:ae:97:70:0b:2a:3d:59:70:91:62:88:1b:a1:11:
         3d:6d:59:45:95:dd:10:b7:41:be:e2:50:5e:68:6a:b9:da:4a:
         7b:1d:2c:66:3c:15:d2:c1:7f:37:0e:02:ef:7a:9a:1d:dc:45:
         17:8f:7f:94:ca:d0:5e:9d:34:34:f7:d8:98:87:d6:f5:76:0a:
         47:d3:68:b4:44:4d:11:7a:97:d6:7e:39:42:ff:b9:df:5b:5d:
         3c:42:d5:90:39:61:71:03:60:39:e0:52:42:16:e7:a3:c9:8e:
         74:dc:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:50 2025 by rpki-client