Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa
File:                     bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa (raw, json)
Hash identifier:          LROChq/1bgEDvZlR49tWsegBjE+6kPpvTbvcM5PJS1g=
Subject key identifier:   28:A3:87:80:D4:D7:BC:91:4D:50:17:30:D0:B2:E2:56:1C:BF:EF:D6
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F432858488DAB5331FD178934C83E2A80
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     401305
IP address blocks:        207.174.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:53:31:fd:17:89:34:c8:3e:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=6d2d8fd2-38eb-496a-b08c-cb67dfde1b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:a8:e7:c9:47:81:35:1b:18:74:23:27:15:
                    10:5d:e5:a5:c5:5d:94:70:a8:b9:15:31:e1:b3:6f:
                    85:01:c1:6b:d5:b6:8f:43:0d:86:8e:0b:34:92:20:
                    6f:bf:99:de:18:dc:8e:7f:53:a1:81:42:59:bd:83:
                    77:a9:4a:f1:1d:b4:b1:7a:42:ae:85:9b:b0:d0:e1:
                    da:ee:ab:15:d8:1a:12:d4:48:f7:f7:83:5c:ff:f0:
                    fb:99:af:8a:09:d6:09:bd:ab:b4:e1:c6:10:11:96:
                    65:f3:13:c0:ad:ea:67:f3:35:da:c9:ad:c0:98:5d:
                    56:b1:fa:f3:4d:56:a7:96:be:27:ae:1e:34:c9:ed:
                    77:84:63:75:46:ce:ae:c1:d0:ee:1d:cd:9a:d1:4c:
                    a2:d6:2a:8f:d9:a1:b3:8f:96:a6:bc:f3:59:01:10:
                    e9:8c:a7:9a:4f:3a:e7:8d:d9:33:52:dc:c7:c0:49:
                    63:0a:88:a9:a1:27:7f:4e:1e:53:5b:81:ec:12:7c:
                    be:29:fb:71:55:1b:36:73:8b:d2:42:e6:ca:4c:63:
                    61:e0:d7:21:6b:05:d4:bd:0b:a5:d9:d0:a0:2c:76:
                    cd:72:a0:6e:04:21:a5:df:41:8e:8b:fb:44:39:4e:
                    2f:c8:0d:4f:88:d8:e9:c7:4e:82:c5:04:23:a7:a5:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:87:80:D4:D7:BC:91:4D:50:17:30:D0:B2:E2:56:1C:BF:EF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:df:f9:2f:1a:eb:f8:24:47:d1:4a:34:68:e2:a6:0a:66:
         3d:fd:aa:67:38:8e:fa:bf:d0:4c:5c:fe:dd:f3:9f:6a:bf:6a:
         5e:03:5f:63:7d:8c:26:6e:72:dc:96:84:2f:33:24:6e:1c:f3:
         98:7a:59:35:e7:ab:e6:51:48:05:0d:92:f8:95:5a:7a:c2:4e:
         1e:32:b0:7b:ad:34:be:6f:42:e8:3e:79:a3:bb:01:b0:a4:93:
         07:c6:3c:7d:d0:08:6e:34:cb:12:77:81:15:3c:01:b1:07:0e:
         e1:4d:ba:da:df:d6:5d:a3:87:c7:2b:d6:7b:9a:1c:07:1d:46:
         b8:69:7e:96:17:c2:56:36:df:0c:ac:16:36:99:15:ab:e9:f5:
         a6:f4:57:76:6b:ca:45:f4:d2:69:a1:c0:cf:82:c4:91:14:22:
         0f:bb:6d:8e:bd:06:12:43:94:cc:9d:72:1a:28:6a:e8:37:6b:
         8c:57:ba:9f:a5:51:c1:f3:ff:79:01:45:60:8f:9f:ee:b1:28:
         f8:1e:0e:76:84:c2:68:4b:0f:34:7f:6e:40:25:59:04:2e:4c:
         f2:e0:fa:c4:f0:d9:fe:e8:2a:4a:0f:ba:0d:92:7b:79:be:97:
         53:54:63:9c:9d:d3:0d:11:93:81:dc:61:af:df:b1:f1:5d:a8:
         c7:f8:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:23 2025 by rpki-client