Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
File:                     1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa (raw, json)
Hash identifier:          3m7wdtVcAXc8zIZsqgnZO5A9AqD3Gmcr6Nd9QuvCIAI=
Subject key identifier:   49:E0:AA:96:C4:A5:D8:6A:E3:8E:C2:09:B4:8C:1E:C5:E4:7D:9F:DD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C7BEF2D8DD4BD2077DC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.208.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c7:be:f2:d8:dd:4b:d2:07:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=76e2a097-94e4-4be1-b2d7-db9911e2b0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:99:2b:78:cc:31:50:0e:2c:9b:b3:89:67:
                    fd:dd:f4:73:8d:09:0d:d6:d8:3b:5d:b2:6e:a4:2f:
                    f0:48:9e:ae:33:6f:49:19:6b:ea:64:a5:81:5b:07:
                    d0:24:f9:15:be:d1:e1:f6:4f:ea:e8:8d:cf:15:f5:
                    e0:dd:5f:6b:c2:9a:e4:b1:0c:b7:6c:91:18:73:08:
                    6e:a5:41:c0:0a:cd:41:55:c0:fb:39:ea:18:bd:c5:
                    9f:57:94:58:0c:1e:50:9a:53:2a:6d:a2:e4:26:28:
                    99:95:29:69:93:e4:cf:27:51:7e:a3:df:69:88:fd:
                    7d:c5:66:08:53:de:2b:eb:9c:2f:e1:2c:ee:59:ed:
                    ef:be:ee:b0:10:53:f1:cb:e1:f6:5c:50:f6:32:7d:
                    3f:96:5b:86:b7:ba:09:6b:1f:cb:dc:4f:20:c2:0d:
                    8a:c4:8f:c7:c1:8a:c2:ad:ff:9b:d6:85:d0:39:c7:
                    b1:cf:40:a2:97:f9:5f:9f:78:32:d7:c9:5d:47:f4:
                    87:1d:10:0c:50:89:26:51:ee:69:f9:fd:bc:19:e7:
                    1e:28:95:85:05:db:cb:04:7e:8f:8d:14:e2:ff:de:
                    b8:f5:f6:73:53:2f:e1:c9:8c:d1:6a:cb:11:6c:99:
                    6a:ed:5f:a7:99:d0:9a:57:5e:64:3f:a8:0f:54:db:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E0:AA:96:C4:A5:D8:6A:E3:8E:C2:09:B4:8C:1E:C5:E4:7D:9F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.208.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:e5:bb:7d:43:64:8b:dd:af:84:3f:f7:66:46:c6:4c:80:
         ed:9b:36:c6:98:95:75:75:dc:7c:6c:3e:5c:ac:d2:70:15:4f:
         08:92:c4:f7:a1:c0:4f:bd:24:7e:0d:0c:d2:a8:ae:d8:ad:0f:
         f7:79:e0:6a:06:5b:d9:4a:a1:16:8d:3f:07:fc:a6:34:06:1a:
         09:a4:29:d1:d9:1c:37:30:a4:35:c7:ca:a7:86:e0:95:2c:8b:
         81:b5:9d:6e:8d:6c:f4:65:83:93:da:38:7e:87:f8:6c:26:34:
         de:64:c7:c4:20:59:81:0b:a0:53:02:8f:5c:67:9c:6c:c2:7d:
         cf:00:2d:ce:70:80:8e:bf:4e:c6:ba:28:f0:52:4f:f1:ef:9f:
         80:ea:91:8c:55:f1:ee:67:b6:fd:31:f2:87:a2:a2:53:e3:2d:
         89:67:4b:2a:8f:18:54:26:c8:82:46:03:b0:6c:0a:2c:af:50:
         eb:bc:3f:79:10:4e:cf:3b:ab:0c:c9:9b:fe:bd:35:0a:68:30:
         f7:74:91:ad:2a:5b:11:51:a1:81:49:d6:6d:11:56:48:fd:17:
         e5:58:70:f3:24:cb:d4:a4:dc:21:41:7c:8c:65:3f:6c:35:c5:
         1a:fb:e6:35:37:3e:fc:53:b9:72:65:24:a8:07:11:54:be:92:
         4a:5e:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:55 2025 by rpki-client