Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
File:                     bf08937d-404b-366f-bdcd-82a7cd5e0545.roa (raw, json)
Hash identifier:          7rTHf8tgfKiQ5vVmsdglBkSIkez17br/ywxaEFdTkPY=
Subject key identifier:   DC:B4:3C:34:43:C9:C9:E9:5A:B8:2E:24:10:F5:1E:72:56:5E:AF:5C
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F43285848222FCF06028732F346A4D580
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     11281
IP address blocks:        204.9.190.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:cf:06:02:87:32:f3:46:a4:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=efa093fb-3588-4206-a05b-bb5c6df77820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:d4:a0:70:78:0b:b6:32:86:2c:84:42:e2:
                    35:cb:15:f9:28:28:d6:7e:d1:c7:1e:5a:69:10:2e:
                    66:17:ae:98:80:5c:b1:aa:eb:65:16:6d:56:70:b2:
                    0a:5b:b7:07:23:1a:a4:48:a7:9a:a4:0e:27:82:66:
                    9f:5a:58:7b:89:74:c5:09:c4:65:9d:c7:5d:f7:5f:
                    67:77:f5:d6:9f:d0:5a:f9:30:db:07:12:71:f3:27:
                    a8:f2:54:44:fa:17:b7:32:b0:1e:d7:3f:08:70:d3:
                    2b:ce:09:dd:a2:3b:a4:34:fd:16:02:82:fc:29:c6:
                    2b:75:f1:42:56:ca:07:71:5e:ee:c1:bd:3b:30:96:
                    3f:f3:1f:12:e2:29:86:0d:db:7c:fa:e1:7a:b2:7a:
                    d2:42:e4:e8:d1:5a:d7:49:2d:0c:34:21:93:72:5c:
                    a0:06:6d:4b:ac:6e:bc:c4:89:ea:47:18:a2:c1:01:
                    35:78:ef:bf:ac:cd:9b:bb:df:84:c9:c2:2d:70:f8:
                    08:45:36:88:89:76:65:22:a8:e8:bc:da:1f:4e:ef:
                    e1:79:a0:f2:83:5c:f8:62:30:d7:53:fa:7f:b9:fd:
                    94:77:2f:eb:ea:e8:6b:f8:4c:59:7d:21:8a:2f:5b:
                    94:69:6a:4f:7f:f2:41:ab:c2:4f:e2:76:b8:59:ba:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:3C:34:43:C9:C9:E9:5A:B8:2E:24:10:F5:1E:72:56:5E:AF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:15:b0:14:0d:d9:6b:45:a5:2a:37:10:fe:65:50:f3:54:
         f3:71:61:ce:8f:16:5d:be:a2:4e:76:56:ad:a2:ab:61:f5:e8:
         d5:27:5e:3d:62:95:55:16:4e:c4:80:1b:0b:7a:59:f6:34:e1:
         ff:6f:ea:16:0e:af:6a:2b:d8:23:bb:b9:22:e6:f5:9e:0c:3e:
         f5:a3:0e:45:45:ed:0a:0a:e9:0c:4c:21:bb:83:06:db:37:94:
         6b:65:3b:ac:0e:a6:52:c1:90:d3:21:24:2b:b6:45:64:6e:97:
         df:df:c5:2b:6e:cb:74:04:10:c2:83:bd:99:10:c0:09:77:34:
         3b:ab:58:6e:e2:02:62:ec:18:5a:80:fe:59:84:2e:b6:28:65:
         c2:80:e5:93:56:d3:ef:fc:17:34:dc:4d:6c:c7:cd:dc:b7:fe:
         fa:42:d5:39:53:a3:e5:dd:0a:e9:67:04:09:c6:72:f4:e7:c8:
         e5:c9:90:02:04:68:6d:63:27:37:66:aa:eb:9c:a0:b6:db:a0:
         3c:a9:3b:0f:7f:91:cf:5d:29:47:76:1b:d5:4c:53:50:b4:47:
         fb:c0:5f:d7:c9:85:b5:cd:93:0d:10:82:5a:c0:bf:46:a0:8d:
         0e:06:5d:0c:c7:33:cb:0a:84:85:d3:fe:4b:08:f2:a2:be:2f:
         50:23:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:35:21 2025 by rpki-client