Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
File:                     d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json)
Hash identifier:          gE4p2tmzLKKd9LuD7OfmkWTWTS+i0Ky7Ie9CVrGH1zM=
Subject key identifier:   B4:53:C5:60:C4:B9:FB:77:50:03:02:9D:E5:E6:34:D3:9A:FD:C6:AE
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F432858486D904F2506A5FC8199AC1A00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     53927
IP address blocks:        139.131.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:4f:25:06:a5:fc:81:99:ac:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=3cec07d6-974a-47de-b9a8-efb43cd5f597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:2c:57:00:9b:e3:b4:12:8e:33:f6:ed:3a:
                    ed:b1:55:98:9a:ee:39:dd:59:96:52:fa:45:7f:49:
                    cb:df:59:0e:7d:c4:39:f6:d4:b7:60:09:2e:1c:ff:
                    30:5c:f7:60:a4:7b:ed:32:9d:66:73:68:c2:3f:f0:
                    43:a0:11:b4:d6:17:34:65:00:e7:9f:04:77:28:e4:
                    97:45:13:4e:31:78:2b:9d:18:21:f8:a1:81:2e:90:
                    ed:de:45:1e:1f:2a:db:d2:46:90:2b:1a:bf:52:53:
                    fd:74:92:cb:fa:50:0d:4a:a4:4a:34:e2:8e:35:d9:
                    77:fa:56:84:6b:e9:b8:7b:76:76:78:11:77:da:2a:
                    a3:1a:d3:f1:83:4f:af:c4:1c:19:23:27:8d:10:43:
                    af:7c:ed:a1:ae:7f:14:52:1f:5f:93:41:72:10:47:
                    80:ea:7f:95:de:fa:dc:aa:f9:d3:ec:eb:69:f5:06:
                    8e:72:b0:de:29:f2:92:74:1a:c8:83:26:06:78:72:
                    9c:4a:ed:b7:1b:87:95:48:e4:56:9b:3a:ad:8d:f5:
                    cb:4a:8c:25:9a:65:dd:98:ed:dc:ab:5b:a8:fc:61:
                    f9:8b:24:b9:d6:ba:e8:e5:09:97:74:43:48:a3:d3:
                    8b:e6:d8:bf:6d:aa:ff:8c:74:29:6e:82:3c:d8:68:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:C5:60:C4:B9:FB:77:50:03:02:9D:E5:E6:34:D3:9A:FD:C6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:0b:11:d1:f5:3c:26:3b:1a:a2:c5:9c:c5:0e:fb:42:ed:
         86:be:55:e3:06:ac:bb:11:b0:01:c8:56:f6:45:cb:30:44:f8:
         64:8a:20:8a:3a:31:29:d8:59:4b:4c:2e:66:51:ce:ec:a8:4f:
         a2:4a:dc:90:55:dc:2e:93:ba:f5:f9:2e:0c:bb:0f:6d:61:30:
         ed:a2:0d:eb:3a:d3:6f:90:78:76:a1:c4:32:dd:3a:f3:97:c2:
         1b:c3:13:b9:41:1b:8e:1a:39:3f:f8:63:95:69:74:18:18:11:
         a4:e0:3b:c7:65:3f:eb:b8:64:5a:eb:6d:38:87:33:47:9d:19:
         58:88:f1:a2:5d:7b:15:bb:b6:19:9a:c4:a2:bb:74:10:da:64:
         4b:1b:cc:0c:df:95:1f:26:d2:b6:9a:74:42:e1:83:34:d0:29:
         05:00:0a:ba:71:98:74:69:dd:f2:0a:09:da:82:36:20:e9:46:
         f4:2b:f5:c3:57:85:89:a8:6d:c4:2f:95:0a:56:f2:7c:62:be:
         92:80:ac:f7:24:92:5d:3f:c6:f5:4a:f6:bc:dc:f7:38:c7:5b:
         ef:08:07:76:9a:48:74:a3:aa:0f:a3:01:f9:69:08:87:1f:87:
         da:48:4c:80:3b:c7:4b:4a:1a:e1:c5:7a:86:ac:0f:98:8e:f2:
         96:d6:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:24 2025 by rpki-client