Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
File:                     d681baca-275f-3528-8cb6-64dd19384edb.roa (raw, json)
Hash identifier:          AEYy2XPcA3ScAyqxoUdcVvXhpQTGoedSUhP0jSsK27Y=
Subject key identifier:   74:66:08:E1:74:BE:6F:F3:E7:11:D4:B6:F6:99:15:E2:02:F0:39:B4
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F43285848B8F0C547FF503F6C5B20F5C0
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     25700
IP address blocks:        204.8.32.0/22 maxlen: 24
                          204.13.164.0/22 maxlen: 24
                          204.15.224.0/21 maxlen: 24
                          208.99.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c5:47:ff:50:3f:6c:5b:20:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=5fb4ae5b-5416-4b88-a4a4-99072e133add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dd:b0:91:c0:fe:13:73:3d:0f:3b:1c:c2:6e:
                    e6:d8:1c:83:9f:2c:8f:d7:5d:ea:06:7d:bf:e5:b9:
                    eb:e2:fa:5d:cb:d3:7a:60:f5:d3:b2:c2:b3:e5:2a:
                    6c:f9:74:90:dc:65:4d:d1:5b:47:5b:14:f1:1a:f3:
                    a4:b8:ab:2c:63:f7:15:20:61:e7:07:88:53:37:4a:
                    91:91:3d:14:ab:a8:58:d3:7e:d1:22:94:5a:44:04:
                    cf:93:f1:f4:4a:95:41:dd:e9:19:4c:f7:5f:b2:8c:
                    93:8c:53:75:8f:3c:67:42:bd:de:b4:55:9d:d0:8d:
                    22:6e:8b:0a:02:cd:f6:fc:e4:71:56:42:15:0b:ff:
                    62:30:0e:93:98:88:b3:40:79:c0:c0:a0:b6:aa:d9:
                    ec:0d:a7:1d:9c:e6:69:42:4d:83:b6:93:ca:4b:83:
                    de:9d:5f:3e:34:1f:f0:92:58:9a:30:77:5a:d9:8a:
                    69:57:63:8f:93:0a:49:64:68:fd:0d:96:41:c7:34:
                    46:ac:e1:bc:b9:68:04:e0:4d:ee:fc:dd:2f:b8:f7:
                    20:75:e1:7e:71:1c:55:3c:4a:f1:87:18:ae:8a:25:
                    5c:50:b0:44:08:6b:3a:f5:9e:cb:ae:7d:82:fc:50:
                    64:35:82:bd:d2:51:17:6e:eb:c1:47:9d:49:70:26:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:08:E1:74:BE:6F:F3:E7:11:D4:B6:F6:99:15:E2:02:F0:39:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.32.0/22
                  204.13.164.0/22
                  204.15.224.0/21
                  208.99.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:71:57:6b:6a:d8:79:d6:1a:eb:17:8b:30:c6:09:10:55:
         f0:2a:66:20:40:88:bd:e7:3b:9d:71:2d:cb:5f:5f:ee:66:7f:
         8c:43:8d:32:06:98:b1:4d:9c:e1:17:53:80:14:21:82:6d:f1:
         b9:d7:74:21:2c:c8:c0:74:7e:40:f3:2e:df:bc:29:3d:cd:7b:
         e2:b9:f9:cb:ae:48:f6:28:18:a0:85:15:ec:b9:b4:60:df:60:
         f0:2e:a3:99:c3:53:d8:c7:07:ff:af:58:94:fb:6e:c3:fa:9e:
         40:e2:a8:9f:76:78:7d:55:31:ff:6c:8d:56:39:52:f5:c0:9e:
         fa:3a:33:4f:d0:16:06:6f:32:da:e2:29:51:78:88:86:9e:54:
         e1:bf:69:1c:1d:42:34:69:fa:80:d8:7b:7c:0b:f7:df:c7:79:
         7a:5b:3c:62:aa:d4:bb:aa:d3:e9:bb:7e:0b:c9:b1:d9:79:fd:
         b1:c2:5e:2f:89:39:8d:c5:1b:1a:14:9a:43:f7:34:76:13:47:
         56:c2:eb:76:ac:f5:03:a2:06:c6:ae:9d:e6:fc:ef:a2:6e:a1:
         b4:79:af:4f:db:1c:3a:09:64:fc:4b:c9:29:c8:7e:67:70:99:
         ee:10:4d:e1:3d:af:cc:7f:e8:21:78:c2:90:21:e5:c2:af:06:
         63:28:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:35 2025 by rpki-client