Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa
File:                     2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa (raw, json)
Hash identifier:          EBApMG26XzazSLc6ABAv+z3A9wHstUD/WPxJk8twp5A=
Subject key identifier:   0B:49:FB:19:47:38:A9:62:75:98:7E:DE:59:7D:FE:B8:87:3F:AF:32
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584827C541C138AB6D42CF59DC30
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     22612
IP address blocks:        209.188.18.0/26 maxlen: 26
                          209.188.18.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:41:c1:38:ab:6d:42:cf:59:dc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=c3025230-2b65-4203-9160-560444f7ffca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:7d:fb:b7:fc:48:ad:2e:03:22:fc:1d:c5:
                    37:77:1d:e5:58:ec:ef:0a:a3:fa:43:77:48:18:78:
                    04:fb:98:26:c9:80:02:d1:15:b1:b5:24:ed:90:89:
                    aa:ed:ce:e2:74:ce:06:e3:05:18:d9:06:6e:40:99:
                    f9:af:d1:88:97:42:36:c5:70:7f:59:69:85:40:79:
                    ff:2c:75:06:24:e6:6f:94:d8:0e:cf:ab:cd:1b:0a:
                    c3:7e:cf:3b:e6:41:95:0e:05:32:f3:af:6b:70:9c:
                    80:c6:5a:53:ba:e4:b7:97:18:8d:eb:a1:cb:4d:6e:
                    31:af:b6:b7:ca:d1:8e:a0:50:32:28:41:0a:b6:81:
                    d7:ff:a4:b2:e8:26:05:1a:cd:7f:fa:6d:d0:93:ce:
                    63:6b:78:44:2f:12:ce:49:c7:5b:dd:13:65:6c:23:
                    50:74:be:24:cd:de:c6:b4:d7:a2:d3:3b:80:fa:49:
                    ee:04:f9:fa:67:42:8f:cb:ce:b1:c4:38:6e:64:7d:
                    64:36:21:65:1f:2c:8e:84:02:1a:eb:ce:a6:5b:e4:
                    f8:4f:f4:56:eb:fc:f2:5b:68:53:9c:2f:e4:63:67:
                    4f:e5:4d:5c:de:f1:be:a3:b2:f0:0e:77:40:60:98:
                    ea:1e:38:1b:2e:cc:c9:3a:a7:51:ac:88:f3:78:6f:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:FB:19:47:38:A9:62:75:98:7E:DE:59:7D:FE:B8:87:3F:AF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.18.0/26
                  209.188.18.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:72:47:c5:69:6f:48:1c:5b:16:ed:fe:48:51:72:a3:5a:
         6f:ad:09:bf:f2:11:59:19:95:65:fa:fa:b4:8e:7b:0c:47:21:
         77:92:f1:6c:db:08:a8:c8:a2:0b:61:4f:85:ad:52:51:ad:d2:
         26:0b:7d:2d:b3:29:2d:5b:84:82:0e:b5:16:e9:04:43:a4:8b:
         f4:9b:07:66:9e:ae:27:8d:5f:7f:0a:f3:c1:67:33:8d:81:79:
         49:0f:84:b1:be:6e:1d:e9:33:d2:80:0c:3e:0b:dc:20:a9:d1:
         5f:64:98:9f:fc:7c:f5:9c:06:a8:73:25:ff:02:f8:67:0a:7f:
         42:af:f8:a5:a3:b2:68:67:ac:dd:d0:68:30:cc:f1:79:a5:d5:
         7f:15:ab:03:76:7e:9f:5b:7c:2e:6b:f5:da:40:59:44:ff:18:
         fe:a5:02:41:f6:31:2e:43:90:a4:3b:f1:39:ab:8d:d2:79:b4:
         ac:89:3e:96:7f:bb:69:f5:8a:5b:df:a6:bd:40:3e:38:35:1c:
         6f:9e:b0:2a:cc:a2:2f:04:52:65:3d:e0:9e:6f:0e:4c:91:d8:
         2b:e8:fa:5e:e8:07:a8:1f:4a:48:81:bf:93:1d:80:9a:37:02:
         c2:82:af:85:eb:f0:8a:a5:e8:60:12:d7:72:cd:70:bc:da:75:
         82:53:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:10:54 2025 by rpki-client