Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
File:                     efbeebc8-e654-325a-9221-7b430f463318.roa (raw, json)
Hash identifier:          4hF3PRa8uWA/MVWUFzO2CHHljXjP30TddMd2w5aezPk=
Subject key identifier:   94:FD:79:E6:8B:5B:3C:17:DC:70:F9:ED:E8:75:E5:D1:E1:56:51:07
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584886B07D4AE931FFBCA5D05880
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     0
IP address blocks:        107.180.146.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7d:4a:e9:31:ff:bc:a5:d0:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=10414237-ec60-4157-a168-68eec777910a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:12:87:fa:d6:f3:af:d2:f5:ea:61:61:aa:
                    c0:bb:97:1a:e3:fd:7c:66:15:8c:59:fe:ba:4b:f4:
                    e6:0c:81:99:bb:f6:e7:75:e5:33:b8:38:1b:d7:33:
                    2f:b0:a0:af:43:51:7c:83:ba:fb:81:e0:34:21:95:
                    84:ee:b0:7d:5a:4e:7c:73:93:93:f2:cc:eb:67:89:
                    b7:d5:31:bc:00:53:a3:93:47:e7:ef:e7:49:01:f4:
                    ed:36:d2:26:a5:da:af:8a:ea:6c:c1:a8:e4:ac:84:
                    67:9c:16:e7:17:6c:a6:02:d1:97:ab:86:97:9a:e2:
                    ab:d8:5b:9d:07:1b:e4:51:34:05:5a:d2:b8:36:58:
                    f3:47:72:48:01:1f:a8:28:0d:8c:2d:9c:8f:de:ce:
                    37:7e:a2:3e:65:bd:86:c5:52:4f:43:55:87:fe:7b:
                    53:d3:dc:fb:3b:26:85:a3:e1:6a:b9:84:f1:70:ff:
                    4a:c8:5a:04:f6:a6:2d:13:64:85:f3:03:ef:b1:b0:
                    0d:f7:4c:0f:53:e9:56:5a:1d:e1:e8:08:9e:e1:44:
                    47:37:f0:58:71:a7:c3:d1:f7:85:e7:6b:61:a3:e6:
                    64:92:93:99:55:b2:b4:44:f6:0e:d8:1e:e4:85:d5:
                    55:91:01:36:0f:57:99:26:d0:24:de:82:dd:54:63:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:79:E6:8B:5B:3C:17:DC:70:F9:ED:E8:75:E5:D1:E1:56:51:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:d2:73:7d:ce:f2:56:b9:3a:a4:99:81:5f:be:48:15:0f:
         42:e8:2a:b8:7c:d3:db:54:5b:3b:2d:52:34:ac:7d:70:41:07:
         c4:f2:b0:4d:2d:a0:2e:42:35:35:bd:cf:76:c1:95:a0:7d:6a:
         e2:2b:8d:34:32:3a:d2:7b:b9:56:ab:b2:64:51:e3:1b:e3:86:
         55:3d:3e:65:43:3a:f4:36:62:17:48:18:d8:af:cc:66:3a:88:
         84:55:31:f1:15:3b:11:67:58:df:28:7f:7c:98:c1:fb:5d:5e:
         30:ba:f0:e7:63:54:a0:cd:09:58:38:a1:1e:59:49:50:b0:41:
         55:d3:27:35:76:a4:08:df:1d:f1:ff:56:f6:82:8d:77:a4:33:
         da:24:ed:c8:de:02:b1:89:35:3f:4f:7e:e7:07:f3:4a:a3:1f:
         ae:ef:49:02:01:c6:ee:e2:9f:0e:e5:69:c1:6b:8f:25:ee:ba:
         9a:65:45:3e:8f:ac:b8:d1:2c:04:39:ff:7c:f0:74:b6:b5:bb:
         ee:49:b8:3b:be:a6:29:bc:f3:41:b4:47:73:0f:d6:b0:af:bf:
         27:40:b2:9c:f7:68:6b:d6:7a:94:94:ba:bf:92:d1:00:a3:31:
         55:8e:25:3f:e5:0e:1d:34:a0:8c:2c:6b:38:21:7b:2d:f4:17:
         18:88:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:57 2025 by rpki-client