Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
File:                     efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json)
Hash identifier:          CTepu3wynwHGyiLINjWiwsbOQkL5//0NOz4o2ZS+6g4=
Subject key identifier:   D7:31:D9:58:26:59:BA:1B:8B:C5:8C:7C:BD:9E:B6:6D:19:7B:61:5D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847DF2F51922E2A1CEAD936E9E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     200017
IP address blocks:        138.84.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:51:92:2e:2a:1c:ea:d9:36:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=706724a5-c2b8-47fd-8e2a-0bcd5096948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:91:fe:19:52:f1:51:f2:9b:72:52:ef:4d:
                    bc:57:11:0e:c3:51:88:64:4f:dd:5b:d9:72:12:6f:
                    35:11:1d:ce:f0:c9:92:97:0a:27:cc:68:1e:d2:1a:
                    db:20:76:1b:83:6b:76:08:01:fd:c9:f6:d7:51:ba:
                    6e:14:74:3d:61:b6:33:53:30:4a:8f:5b:6b:29:54:
                    0c:66:d9:4b:21:12:b4:d5:53:90:ae:4b:82:6b:ad:
                    2b:dd:e1:49:7f:4e:4f:14:70:98:4f:81:70:96:7b:
                    f5:fc:2e:cc:3d:39:58:d3:17:83:02:a4:01:4e:c8:
                    e7:74:df:3e:19:d2:dd:4b:c4:b3:3b:df:1b:32:37:
                    6e:07:79:0a:e5:c7:ec:d2:b6:8a:a3:dc:d8:06:7d:
                    7c:3c:a6:0f:a1:04:a0:94:e3:ec:9e:c1:2e:12:bc:
                    cf:a1:96:b0:a1:37:3d:6a:11:c3:53:d0:03:90:e5:
                    ab:ac:ce:c9:d8:2f:68:53:4e:a0:b8:6a:56:cf:8e:
                    d4:78:4f:4e:e7:84:6b:4e:ca:f2:f1:0e:51:dd:a3:
                    8c:bc:70:07:f4:96:9e:0f:e3:9c:08:cf:6b:27:54:
                    bc:73:ab:af:5b:f1:c7:c4:20:28:16:d7:58:df:b4:
                    90:21:44:a0:2c:32:39:f0:cd:3f:fa:57:fe:11:96:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:31:D9:58:26:59:BA:1B:8B:C5:8C:7C:BD:9E:B6:6D:19:7B:61:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:57:d5:b6:47:eb:4f:c6:d0:a4:5f:7f:0b:29:58:33:c4:89:
         20:52:0c:50:23:d8:61:ec:3f:80:0d:29:fc:9b:0d:1a:c9:25:
         8b:96:f7:f8:5d:8c:ab:36:b6:bb:fd:b0:b4:77:75:eb:bc:d2:
         6e:f8:37:af:57:53:ef:ad:09:a8:6d:64:36:1c:18:29:8b:77:
         f2:55:3a:ba:c6:41:0c:51:3f:ee:72:32:02:cc:f7:2a:91:b8:
         77:52:ec:a9:ac:dd:df:e9:b9:aa:b2:3d:d6:6e:b7:ab:f2:28:
         b1:c5:29:04:1b:2a:e9:b1:e5:0c:ef:34:e5:a5:cc:5a:77:42:
         b2:6d:95:bc:67:d9:63:b9:c1:76:fd:fc:bf:ac:82:58:a8:4c:
         68:f8:64:f8:93:a2:f0:60:a7:f5:af:82:e4:95:67:bf:9a:37:
         83:c0:6a:86:74:69:39:be:3f:6a:47:15:55:d7:6f:c4:97:8b:
         cb:09:ab:dd:6e:c4:9e:70:a9:c5:89:16:94:fc:dc:ed:1d:83:
         33:1c:c0:55:68:bd:64:b4:c0:d4:54:2c:ee:22:70:c2:4d:e7:
         39:51:3d:93:e1:1b:67:42:7a:19:32:67:be:9b:7f:1f:45:4a:
         0e:a7:c3:5b:f4:07:d1:db:2c:5f:60:2f:d7:1a:c3:fb:30:18:
         fb:c7:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:50:33 2025 by rpki-client