Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa
File:                     e28a2279-9842-305e-b0f4-a5fa89cfe419.roa (raw, json)
Hash identifier:          lELHMqVYmp0XuBPVmRfYDGfo6TnlYZt6v0mKz2dJmXQ=
Subject key identifier:   EF:61:A3:92:0E:A1:37:14:12:11:12:2E:C5:D4:8F:E9:49:4B:8A:E0
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584819CFC4CA6F5B04978E6B5A00
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        207.230.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c4:ca:6f:5b:04:97:8e:6b:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=56b9d603-5ace-48fc-ad66-ba854f28d624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:61:a2:70:b3:c4:77:38:63:69:96:c9:38:
                    c3:51:40:e1:1d:21:a8:e1:59:ca:75:ff:ff:d7:69:
                    ff:3f:bf:40:5f:47:52:32:d3:19:78:64:d4:c6:bd:
                    2c:19:8c:b9:72:0b:9f:f1:6c:e8:13:fe:3d:b2:7d:
                    94:63:19:7f:4a:f3:7f:8c:b7:27:2f:ad:0f:93:37:
                    b9:cf:bc:ad:5d:8f:9d:5d:68:94:79:d7:28:94:f5:
                    fc:e2:25:ea:29:19:02:24:bc:44:bb:75:ae:1a:7e:
                    71:bc:cf:d2:79:1b:4d:51:e9:83:b0:64:9a:35:c7:
                    3d:06:49:ab:f5:4a:8c:53:c2:00:3d:2e:da:79:99:
                    58:28:e0:fa:5e:19:03:cb:23:fc:2b:2e:3e:7c:22:
                    61:14:9c:bc:c2:96:96:37:a8:e4:5d:d7:c3:d3:6c:
                    11:c7:2a:2a:31:25:7e:1b:a6:ad:ed:31:5f:a2:5c:
                    a7:72:b7:55:d7:ae:05:04:5c:ee:0e:18:60:ed:1d:
                    69:2d:b1:4e:e7:b4:bc:34:0f:f3:41:9f:a5:51:fa:
                    a5:7b:af:59:46:3f:ca:b1:6f:e1:aa:63:8c:91:c7:
                    5b:4d:c9:5b:be:6e:99:08:61:ed:dc:d4:d2:aa:cb:
                    77:b6:d9:d6:77:5f:52:a8:cc:42:27:36:9d:39:bc:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:61:A3:92:0E:A1:37:14:12:11:12:2E:C5:D4:8F:E9:49:4B:8A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:a3:3c:46:39:d4:a9:33:b5:c9:17:7a:fa:6c:0c:0b:61:0c:
         a0:d9:69:7a:d9:dc:99:c8:26:73:c6:0d:27:07:db:90:12:52:
         82:15:f3:f3:2a:e5:c3:24:7c:5a:77:b6:e6:ca:78:a5:51:39:
         1a:c7:09:3a:19:98:f0:a6:ed:a1:ae:fd:c4:86:67:96:26:ca:
         e5:53:15:83:8b:f5:cc:ac:7a:40:aa:8c:3c:b0:2d:f3:65:77:
         51:89:01:0e:e4:41:43:aa:54:90:54:a8:cc:3e:cc:37:e9:99:
         a4:9b:06:de:b2:2b:74:8f:7c:c4:09:de:77:82:07:cb:c6:0d:
         c2:8a:ab:c3:bf:5e:a2:a3:2c:1f:13:7e:34:b1:05:90:58:49:
         ac:5d:f2:af:5d:71:f1:13:d4:97:79:a9:46:90:e5:f1:22:b8:
         77:05:cc:7a:66:a4:50:79:fc:6f:5c:ef:3e:01:0d:fb:3f:18:
         95:6c:77:ab:f4:6f:0e:90:02:b5:3b:8f:66:65:5d:9c:eb:f4:
         99:b0:50:b8:b9:bf:5f:5c:40:b0:5e:af:9e:44:15:66:ed:2b:
         9f:92:d0:6f:3a:f7:5f:50:c0:73:05:a8:b8:1b:d9:61:3d:34:
         c5:98:ca:2b:9f:3e:ec:db:fa:54:75:b7:df:ad:f8:b5:2e:7b:
         a3:4e:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:12 2025 by rpki-client