Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa
File:                     b89d1083-da50-3eaf-b7d8-f77234560bfb.roa (raw, json)
Hash identifier:          4DVaSQPiNc6vNqudnplFDfS/d339fNwLrjH9xlKFFjE=
Subject key identifier:   09:77:60:BD:20:DB:1B:77:19:5B:B3:0D:5A:E0:4F:4E:B5:47:B9:04
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F432858482D5A901C4596AAE5E5CC8B40
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        140.98.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:90:1c:45:96:aa:e5:e5:cc:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=582ed0bb-8a5f-4be2-8edc-dd49c056ef13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:ae:62:7d:36:33:5e:27:96:83:6b:71:1d:
                    26:05:cf:19:9d:c7:af:d9:34:12:69:6a:47:c4:5b:
                    93:6d:ae:b7:31:67:64:e0:45:7e:72:5c:f7:14:3d:
                    4d:25:c1:71:ed:a8:08:e1:e9:87:b5:fc:b8:a4:3d:
                    85:0a:0b:b4:0c:2b:b1:e7:03:67:2e:53:89:88:aa:
                    2f:16:18:11:c6:42:10:a4:86:87:9e:85:4a:6b:06:
                    07:6e:1f:16:e0:a9:e5:e1:f8:2b:4a:3e:ae:fc:1c:
                    de:42:88:cc:c6:66:f0:27:02:f1:bc:ea:93:88:f2:
                    4d:bd:b3:e3:fe:82:b2:25:6c:b4:ca:da:21:a1:cc:
                    c5:65:94:c3:f9:3c:71:73:7d:a0:5d:78:7d:c9:ab:
                    f5:a4:e2:c1:f5:d1:00:17:dc:53:56:c4:f5:19:ec:
                    d6:eb:d5:e8:f6:a6:bc:f5:7d:49:7d:c8:55:26:15:
                    78:bd:18:13:06:39:bb:d3:35:18:b2:d2:14:28:44:
                    29:bf:6f:20:e1:52:e1:55:05:e3:49:5f:02:c3:7b:
                    1d:cd:10:6b:be:76:b3:c1:74:90:ee:48:5f:a5:9c:
                    e4:71:59:5d:62:52:65:4b:b4:86:92:c3:23:2b:b6:
                    b9:bb:4c:50:b1:bd:ac:7f:91:da:69:95:6f:1e:fc:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:60:BD:20:DB:1B:77:19:5B:B3:0D:5A:E0:4F:4E:B5:47:B9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:77:be:e8:60:c4:68:2a:cd:de:b8:b6:2c:a1:54:e2:b2:
         db:0a:d8:43:17:62:c1:56:b3:14:fe:d3:59:0b:0a:36:0f:0c:
         91:45:d1:5b:16:db:7a:f9:2d:3e:f3:79:8f:96:d9:6d:c0:92:
         fb:05:91:33:3d:8b:a7:64:0f:d9:00:2c:77:a8:a5:c7:72:0d:
         84:9e:35:c3:88:49:79:ac:76:2d:52:29:7c:05:d4:df:d6:c0:
         44:ae:6b:67:2c:51:e3:0b:77:36:7f:49:8f:2f:54:36:3f:74:
         14:bd:f9:a3:57:96:63:be:ce:21:12:c3:63:97:1c:8f:d7:c0:
         d6:bb:a1:32:17:ac:0a:d7:8c:86:1c:b5:d9:04:22:c9:ee:dd:
         70:78:19:0f:51:a2:9f:a5:fe:8f:92:f9:e4:c4:5f:75:72:80:
         de:7f:dc:a4:39:14:ef:d5:c6:dc:0c:25:be:a6:dc:0a:c7:43:
         bd:b6:14:57:d7:c7:f8:dc:85:d7:af:d4:64:9e:94:85:bc:a5:
         c0:18:f5:fc:ea:bd:ef:31:a3:71:7c:20:53:6c:d3:23:0b:d4:
         2d:9a:d6:1f:a5:a4:2e:b6:aa:c6:08:8d:73:e8:ce:78:3e:f1:
         30:84:09:07:af:19:12:73:88:90:48:a5:51:87:f4:49:8d:70:
         e8:e6:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:36 2025 by rpki-client