Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
File:                     d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json)
Hash identifier:          1Ei4g8i7uceLOONUOm50tGst4lsS2qSG+n/D3kx091c=
Subject key identifier:   81:1E:2A:C4:6B:4C:02:20:05:D1:E1:91:F8:59:8D:F5:15:C6:41:56
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F432858481F652E64AD89367263E0B680
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     101
IP address blocks:        207.231.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:2e:64:ad:89:36:72:63:e0:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=45e427b6-acb4-4800-92b7-758ee7005fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:d0:c2:c5:bf:f7:17:96:b2:8c:f4:d7:e9:
                    0f:9e:60:67:eb:96:91:4f:d5:41:5b:ec:ed:aa:88:
                    a3:af:a8:a9:ea:6c:93:af:ff:01:6c:0a:0d:ff:19:
                    81:c3:bb:5d:5d:55:ec:0f:8c:b8:60:bc:ac:b1:dd:
                    04:a2:73:c3:38:f9:37:83:5d:3e:c6:00:1f:ee:b5:
                    f7:de:dd:1f:50:c7:38:ba:cd:bb:8d:96:12:d4:85:
                    41:cf:5c:6b:14:ea:c0:96:22:b2:51:98:f2:db:ac:
                    4b:8d:29:72:56:1e:ce:7d:54:5f:dd:6b:68:31:b6:
                    f4:1a:e6:bb:79:ed:ea:c4:77:ca:99:bf:3a:63:f5:
                    e2:2a:d2:ff:09:77:71:bb:4c:db:74:e8:bd:a2:0b:
                    36:8f:75:7c:22:4f:90:e1:7f:5d:65:bf:fb:e0:b0:
                    7a:23:bb:ed:00:a2:43:50:d3:ae:75:25:2d:d6:ae:
                    4b:2d:fb:48:30:77:7c:1a:30:cf:c7:6f:6e:e7:94:
                    27:e0:c1:1c:b0:a9:47:17:c1:b0:6b:7a:d4:95:60:
                    88:60:d7:40:e5:f2:92:fe:6e:c1:f9:cb:d9:fa:cc:
                    9e:60:9e:d0:13:09:c6:8a:ed:30:79:c2:ca:59:d1:
                    37:47:4d:b8:20:92:49:a7:04:e0:38:fa:8f:87:6f:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:2A:C4:6B:4C:02:20:05:D1:E1:91:F8:59:8D:F5:15:C6:41:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:dc:29:65:6b:b4:65:7d:d8:14:95:9f:10:93:0c:d1:b4:
         b7:61:fa:0a:59:f1:a7:fe:2f:85:f2:d7:d8:a7:e3:78:3d:dc:
         d8:27:cb:45:d1:3c:dd:3e:25:5f:0c:35:03:7b:f7:ea:68:da:
         86:fa:c3:49:ce:05:3c:ea:54:a4:b4:61:ef:75:5f:2c:ad:5c:
         fe:ac:f1:0b:a7:a9:b6:03:b6:f5:3b:1c:4d:cf:19:f0:ff:a2:
         c5:d4:5a:3e:18:41:54:83:81:25:ce:30:08:0e:76:82:aa:7a:
         74:5e:ab:79:06:c1:15:7c:ac:1f:b7:47:16:1b:8a:a7:94:cb:
         3d:e9:6b:aa:bc:a2:fb:10:28:26:33:eb:0a:ad:65:b9:2f:17:
         58:4d:db:bb:40:56:6c:5b:39:96:8f:e1:70:aa:98:16:5b:01:
         ef:b7:c2:e0:2d:99:0a:6a:a2:88:6b:3b:56:e1:d2:ae:21:2a:
         fe:5c:89:aa:8b:5e:98:51:c6:6b:7f:a5:ae:9b:bc:e5:74:dc:
         15:c5:e5:7a:b6:86:74:5e:e3:47:b6:e5:c8:99:e3:64:77:4e:
         e5:e2:77:00:b6:e2:8c:a1:3d:83:8d:92:a3:db:fe:c7:7a:9b:
         61:49:1a:6f:48:de:c3:9d:df:b9:94:e6:69:27:37:82:b3:53:
         da:ea:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:59 2025 by rpki-client