Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File:                     274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier:          P0qA/Ho/YE7NqXpNkp/71yM8KGb4pa93FCinoBTEFCw=
Subject key identifier:   E3:DB:B7:AF:F0:5F:7E:A0:BD:4F:03:EB:F0:B7:91:48:F3:DC:2B:67
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F432858486695C707838A35269733C480
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     398025
IP address blocks:        67.219.0.0/20 maxlen: 20
                          69.1.224.0/19 maxlen: 19
                          161.82.64.0/18 maxlen: 18
                          170.103.64.0/18 maxlen: 18
                          204.63.0.0/20 maxlen: 20
                          207.29.224.0/19 maxlen: 19
                          208.100.192.0/18 maxlen: 18
                          216.128.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c7:07:83:8a:35:26:97:33:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=0968ca97-e9e3-4d53-8b16-c59b52b87a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:9c:76:3f:5b:c8:93:7a:e8:7f:de:e0:f8:
                    a1:56:29:cf:fc:00:aa:57:84:e1:89:e8:9c:34:d4:
                    07:ef:13:9c:33:c4:3d:2a:f5:c1:48:08:49:19:73:
                    c1:06:56:9e:2e:08:c1:1c:0f:13:6b:4c:6b:16:9f:
                    ff:7f:90:e3:c2:bd:c4:3d:5f:4a:ff:b2:f4:b5:61:
                    f3:19:fc:ea:1d:4a:3b:b6:1c:b0:53:2b:5f:4c:19:
                    c7:98:79:99:6d:00:eb:aa:af:2c:93:86:30:95:69:
                    9e:fa:03:81:c2:54:90:7d:06:62:e5:56:5c:f8:b3:
                    33:49:bc:68:13:0b:2e:09:c9:f0:85:12:10:4c:4e:
                    ab:2e:93:ac:5f:e6:1f:92:ca:fa:b5:7c:f0:9f:e7:
                    8b:cc:0d:dd:84:31:0f:e4:41:c0:6b:54:75:a9:93:
                    52:61:c5:db:1e:82:55:b6:39:fa:6b:fe:88:04:81:
                    90:73:c8:ea:4d:24:da:93:15:3d:6d:9b:e5:43:27:
                    4c:21:b8:e0:7a:36:a4:3c:ee:0d:7c:41:37:b8:8f:
                    99:d9:c0:96:0f:d6:6f:a1:83:dd:81:49:d2:5b:4c:
                    aa:75:92:1d:28:ca:8e:bd:35:b5:9f:c6:22:12:19:
                    2a:67:d3:8d:26:2e:49:75:ec:9d:c2:23:f6:90:f7:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:B7:AF:F0:5F:7E:A0:BD:4F:03:EB:F0:B7:91:48:F3:DC:2B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.0.0/20
                  69.1.224.0/19
                  161.82.64.0/18
                  170.103.64.0/18
                  204.63.0.0/20
                  207.29.224.0/19
                  208.100.192.0/18
                  216.128.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:eb:68:b5:8d:64:96:8d:91:5c:c8:72:ef:28:db:14:88:
         cf:33:76:f7:fd:e5:71:81:57:7a:10:10:b1:d8:e0:a0:5d:ab:
         89:22:b4:67:fe:83:1f:c1:47:d5:04:a8:88:27:e9:9e:d6:13:
         48:bd:38:c5:14:81:7c:ef:4a:d2:bf:66:e7:e4:ce:4d:82:9b:
         92:89:89:9e:b7:c8:e7:1c:bf:fe:b9:31:4c:90:e3:a7:30:5d:
         36:d6:d3:e2:60:b8:9c:ba:7d:4a:b0:d1:ff:b9:c5:7c:6f:2c:
         6e:db:2e:ed:cf:39:75:35:d7:6a:33:5d:ae:b6:e0:16:85:42:
         59:34:2a:ac:4a:54:21:fb:b3:5c:fb:8e:4a:8c:44:e2:55:35:
         52:b2:8a:f0:1f:f8:b2:58:62:3e:cf:d7:fb:48:1f:58:eb:ad:
         36:e4:1f:78:f7:97:0b:b0:73:79:7b:63:73:9c:64:b2:0a:1b:
         8e:d0:89:5c:ae:64:22:ab:14:b4:83:f4:08:a2:3d:c3:0e:93:
         b7:e9:9a:e0:72:4a:0b:3a:c8:42:6f:d7:52:b0:f8:ac:f9:84:
         29:15:8f:ba:c2:75:bb:d4:ee:e7:67:ca:92:72:d3:04:65:c6:
         a4:d1:56:4f:82:51:ea:b1:ed:6a:0b:55:c1:b4:b3:ed:77:c3:
         10:b4:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:50:50 2025 by rpki-client