Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa
File:                     cd2283ac-61d4-35e2-a161-6260ba6bd153.roa (raw, json)
Hash identifier:          vubTd8z6Q1OwTGVSpJjyWv7/uqzqt6aC7wMdStCfU14=
Subject key identifier:   F0:05:C0:9A:6E:98:DF:08:8F:01:7C:DC:63:4D:2D:8A:25:D1:2A:D4
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285848265FF835F6DDFB0E7B0F9080
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     3477
IP address blocks:        151.207.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f8:35:f6:dd:fb:0e:7b:0f:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=cf7e2327-c9be-4682-9a28-10868128dd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:02:7a:be:1f:ab:05:eb:fa:db:ac:3d:bb:
                    03:29:43:bc:60:5f:2a:01:3f:ec:ce:38:15:de:0c:
                    ed:5b:b7:6b:89:7d:15:73:05:60:19:33:ee:f8:75:
                    81:db:7c:42:a7:29:93:99:1c:bd:5d:4e:55:5e:51:
                    f8:87:62:6c:44:c9:a0:03:ea:62:e4:67:e0:39:ae:
                    7e:75:53:5b:71:ce:fb:f0:72:4c:ec:12:f4:61:eb:
                    a6:e2:21:61:b6:84:75:b2:52:55:d1:74:ea:ba:f0:
                    27:1c:56:55:cb:b5:c3:c4:46:9d:36:38:00:ee:73:
                    15:fd:7f:94:65:8f:9d:c5:11:8f:8b:14:87:14:8a:
                    bf:9c:a3:be:7b:7b:c0:e8:6f:03:3e:25:e5:20:70:
                    0d:84:c3:0c:65:25:34:9a:32:c6:7f:fc:79:10:8f:
                    ed:9c:e2:62:36:5b:7a:d5:68:1d:39:50:4d:df:a6:
                    7f:5b:cf:c1:b7:6f:25:f2:5c:12:52:45:06:38:08:
                    80:0c:5c:44:ac:10:b1:15:89:f1:21:13:65:46:51:
                    b7:b2:d4:40:3b:45:e1:e9:f9:a7:12:cb:db:c9:cd:
                    c9:08:18:3e:be:9e:93:d3:fe:6e:a5:7b:c9:c5:be:
                    9a:97:04:ef:d1:f5:c5:65:f6:65:ef:cd:85:35:37:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:C0:9A:6E:98:DF:08:8F:01:7C:DC:63:4D:2D:8A:25:D1:2A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:e9:77:44:49:db:98:9e:4d:07:8c:c0:73:28:59:5c:0d:
         32:cb:19:0e:51:33:2a:2d:79:d6:02:9f:f6:1c:af:1a:1b:e0:
         da:fd:a0:f8:0e:65:5f:51:e0:94:0b:24:d9:1a:78:65:0f:b4:
         bb:c2:c2:0f:60:bc:cc:43:17:4d:09:66:36:b9:e7:f1:00:7a:
         e0:f5:a9:c6:0b:8f:e7:9b:62:96:9b:16:db:82:5c:60:bc:58:
         1b:e3:72:da:75:85:44:af:32:20:50:a9:61:4c:66:b3:56:bf:
         c0:76:8e:6d:e0:f7:b4:9c:d3:36:98:bc:33:1e:e2:44:b5:bd:
         40:95:9d:14:83:3a:7f:56:8c:6c:22:94:78:2b:3c:e1:1c:57:
         26:fd:70:96:de:48:db:53:d3:8d:81:75:40:1b:a4:57:7d:a2:
         0d:31:0f:bf:3e:51:fe:5a:dc:90:ef:95:64:bc:6d:ef:d2:c0:
         e6:73:58:a3:82:7e:5f:d5:c5:19:29:5e:d9:17:96:cc:af:6a:
         9c:9f:d3:98:c1:33:9a:92:85:d7:23:fe:86:e8:88:11:5c:10:
         70:31:9a:95:6c:5f:c3:7f:b1:93:f8:8a:fa:df:bd:11:e3:e4:
         c0:52:4d:60:7b:12:37:6f:96:eb:53:fd:e2:f3:8e:c4:cc:4a:
         0f:f0:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:52:09 2025 by rpki-client