Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa
File:                     26322910-31e2-3284-82e4-3af775262b6e.roa (raw, json)
Hash identifier:          QJEQ+FHtcIpBneZEsNFOesuh0vteTg4/08OVl6fDMzg=
Subject key identifier:   31:8F:F8:14:7B:54:D9:73:20:D7:9B:61:A5:6D:CA:47:73:42:06:D3
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F432858484EDACF1328EB176AF1778E80
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        107.180.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cf:13:28:eb:17:6a:f1:77:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=56da90b3-1621-4568-9ee1-5488ddadb101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:7f:08:9f:fc:66:d9:5f:bd:98:7b:95:74:
                    80:16:bb:6c:8a:19:71:c7:f9:cb:44:76:cd:02:98:
                    e4:38:7c:88:7f:1b:dc:8c:eb:b7:bf:13:1b:cd:5b:
                    5e:16:91:44:81:d9:f3:10:ba:2f:61:5d:31:f0:93:
                    f9:4b:b3:8c:e5:9b:3e:7e:a7:8c:ac:bc:21:a1:2c:
                    6e:c2:cd:e2:59:78:6a:66:44:df:22:51:1d:a6:5f:
                    de:30:2a:88:68:a0:79:09:9a:ae:e3:a0:ad:0b:eb:
                    e8:59:8d:fe:9c:f1:90:04:be:38:fc:14:3e:b4:d4:
                    d2:ae:98:cb:52:ff:e2:b5:02:15:38:d1:64:1a:af:
                    0d:34:ea:7c:03:48:75:44:d9:6e:8a:14:9a:36:5c:
                    27:d0:c6:2b:6a:ef:60:c5:9e:cb:d1:c2:12:1f:c7:
                    dc:2a:98:0c:c0:d7:4b:bc:c0:ab:24:6d:42:a4:ce:
                    23:f9:47:02:dd:72:ce:1a:2d:51:57:bf:06:e6:ba:
                    32:90:9f:4e:86:84:0e:00:4c:8b:cf:aa:b9:03:ad:
                    e6:6c:ab:30:02:71:fe:08:b1:b4:17:40:7d:e6:4c:
                    f0:e4:04:e0:43:99:0e:44:77:e7:87:78:85:db:30:
                    54:8a:d8:78:24:53:26:b4:ac:8b:97:e9:6f:89:ea:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8F:F8:14:7B:54:D9:73:20:D7:9B:61:A5:6D:CA:47:73:42:06:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:eb:3e:a6:13:31:5d:fe:04:f4:8c:e7:5c:fb:bb:19:9f:
         a1:bf:ff:b4:9d:d7:8d:0b:9f:96:41:6d:a1:d0:b2:8b:d0:1d:
         b9:a4:f5:34:96:30:ff:c7:c0:d8:6b:e5:81:7c:40:9f:f4:ac:
         ec:11:41:20:41:fd:a1:9c:68:f8:87:96:95:1b:0e:4b:dc:da:
         57:2f:a5:08:f5:3d:51:2d:0e:97:22:c7:7d:89:7a:50:5a:d1:
         63:60:d1:a2:79:7e:d2:7e:0e:14:76:04:c9:04:fd:01:cc:e9:
         13:0d:55:0f:c3:96:44:f9:b9:78:51:ca:ee:d4:23:b4:c6:bd:
         8e:f4:57:a1:e6:ab:4d:64:4b:90:3e:59:a3:d5:3e:d4:a8:9a:
         0d:39:b2:87:ed:63:81:81:ba:bb:ed:db:8c:3e:09:76:24:7d:
         c2:e3:93:2b:ec:0c:a3:16:01:e7:dc:66:16:9e:9d:fd:85:2b:
         d7:7f:b1:a7:dd:ef:c5:04:59:e9:45:fd:60:5d:e1:da:60:59:
         bb:ce:d3:a3:6b:59:4d:da:ff:eb:97:e9:7e:98:a7:6e:86:d6:
         97:ad:36:02:29:fa:fa:a7:91:bc:b0:aa:87:38:ad:cd:56:8f:
         4b:ac:91:8d:52:e7:65:a2:fd:2b:53:f4:8c:f9:f1:91:ec:39:
         a6:91:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:03 2025 by rpki-client