Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
File:                     b7a3cb31-6115-3593-b825-42ede5d33f0c.roa (raw, json)
Hash identifier:          7Qb7NEXNaUQhG1SclUSkJc3M9ukSjPkHYFYrZkMEBEE=
Subject key identifier:   4A:9B:6D:99:0F:5A:67:20:B8:7B:6F:F0:31:E6:4D:53:A4:5C:AE:37
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584832F034F82231F33C68969E80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     197122
IP address blocks:        204.155.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:34:f8:22:31:f3:3c:68:96:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=28464744-25f0-4be2-af7f-4e36f5c51397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:ca:66:2f:4a:2b:9d:0d:38:6d:b8:2f:60:
                    c1:a6:00:52:95:22:6e:ec:7d:d3:17:a3:3c:20:a9:
                    38:90:23:11:61:c9:a0:8d:bf:94:88:b3:22:58:a2:
                    7d:bc:d9:4d:af:56:70:17:9c:ce:4e:2a:44:1f:19:
                    04:7b:52:4f:fa:ad:c8:43:56:e0:2c:bc:da:1d:77:
                    24:f7:2a:1a:31:5f:94:78:6f:bd:75:51:0e:5c:47:
                    a5:eb:49:99:5b:29:e9:59:e2:4e:0e:66:55:d2:af:
                    0e:2d:68:20:d8:62:19:8f:3d:19:8c:9f:8b:80:6f:
                    30:fa:68:a7:93:9e:24:30:72:ac:9b:0a:76:9c:5e:
                    1c:24:05:2c:ec:0a:5d:5b:ee:05:37:ec:ca:2d:c1:
                    3d:75:8c:22:b9:2b:0d:51:89:d8:15:72:a4:2c:ac:
                    d7:1d:91:a7:a7:3b:a6:0b:37:27:ab:5e:e3:c1:c5:
                    dd:e1:e8:0e:25:09:14:d0:19:8e:2b:57:f4:25:69:
                    3c:89:48:07:4f:1d:1a:8a:db:55:6f:93:c3:c6:76:
                    50:72:fb:eb:fe:8f:87:4c:28:29:1e:49:61:03:79:
                    9f:f2:94:5c:b9:a2:5f:14:83:00:63:dd:da:17:12:
                    f9:79:f6:db:6d:a6:27:d7:71:56:9d:44:3a:80:37:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:6D:99:0F:5A:67:20:B8:7B:6F:F0:31:E6:4D:53:A4:5C:AE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:66:0e:37:46:63:65:f6:13:3d:e4:97:f8:cf:67:16:9a:73:
         aa:68:f7:c7:a4:68:ba:03:ee:e7:0b:15:ef:5f:33:e3:99:bc:
         bd:b4:cd:2a:9e:cc:b0:69:df:c9:9b:a7:4e:8a:89:be:d2:3c:
         38:24:ca:9b:63:12:c2:8d:f7:fd:47:ec:96:2a:5e:94:78:07:
         90:45:59:0a:fc:69:19:0b:10:93:2b:4a:45:9e:f8:8e:38:da:
         9c:81:02:c8:b9:cc:f1:1b:2a:c0:3f:3c:3c:87:c8:12:b0:9b:
         2b:be:f2:46:65:d8:b4:15:62:88:83:11:cc:e9:cc:bc:96:9a:
         e2:fc:31:bb:a5:1f:09:25:dd:53:23:81:ba:f8:81:f3:0a:c0:
         96:22:02:94:2c:8e:6a:02:88:95:77:36:0e:53:96:9e:d1:71:
         a0:24:48:e6:7e:64:ca:68:bd:ee:de:60:e3:48:ed:9b:6c:a6:
         1a:69:e0:61:50:b9:bb:a6:89:a7:f0:a8:5c:6f:5b:0d:55:73:
         a0:fc:ca:8f:d3:3e:bc:c1:9f:2f:d1:fc:ea:43:41:43:0b:01:
         6d:7e:99:7a:8c:f5:d3:ee:db:22:a1:ad:d8:b9:9c:e2:d0:e3:
         9b:d5:bc:94:4a:9b:58:ad:6a:5b:63:9b:d8:dd:d8:77:56:16:
         7d:8d:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:34:28 2025 by rpki-client