Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa
File:                     3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa (raw, json)
Hash identifier:          +RbD7lZDnOpV+l9kozQ5X7Ys9xlL25pnUNqeEhPZdaA=
Subject key identifier:   88:3F:58:69:10:39:26:C9:7B:8A:A4:65:0C:3C:92:F8:26:92:7F:2D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325CE4865792EEC937D9180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ce:48:65:79:2e:ec:93:7d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=23d1a1a8-e471-412c-bddb-01952c9a9737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:aa:49:e8:ac:5b:0f:e3:3a:d7:c4:16:06:
                    14:64:08:48:ad:90:9b:ca:e7:f8:37:61:31:a1:9c:
                    89:ef:8f:d8:19:63:dc:ba:16:b2:72:9c:9a:0f:0f:
                    45:fd:09:bb:71:fe:46:84:3b:72:81:f0:a1:7c:b3:
                    01:68:51:ce:4e:52:7b:bb:ae:7c:b4:47:b2:ec:76:
                    49:93:2a:50:52:bc:c7:7b:cd:78:7a:21:93:de:d4:
                    06:93:25:81:f4:a0:7d:f5:c1:7d:ac:a3:ef:3b:f2:
                    7e:75:fb:10:c6:10:5c:69:d0:cf:4d:0d:e4:df:9e:
                    91:22:58:92:82:d9:5f:f9:2b:8f:0c:a8:fe:04:bb:
                    28:54:9e:fe:87:8d:99:d3:18:86:55:76:3d:7b:83:
                    63:2e:11:8e:94:32:38:59:72:e0:e3:12:44:e1:87:
                    52:a1:a1:8c:32:a2:b3:7d:1b:1b:11:4b:10:bf:59:
                    9b:1b:a8:b1:ca:36:e7:85:5e:4b:19:1f:bd:fc:b9:
                    f9:c8:a4:1f:78:c8:c4:aa:b4:07:07:46:7e:9b:4e:
                    fb:68:ab:5a:20:74:09:20:7f:6a:45:7e:49:ca:83:
                    9d:cf:3c:06:9e:07:07:3c:25:ad:b8:3e:10:00:ec:
                    c5:09:94:e8:59:ce:47:11:8f:cf:9a:f2:c0:cd:df:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:58:69:10:39:26:C9:7B:8A:A4:65:0C:3C:92:F8:26:92:7F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:22:ce:6e:58:9f:cc:05:9a:49:b2:fe:20:36:e4:57:12:25:
         8a:b0:af:32:c9:a2:ec:fc:f6:74:7d:de:bc:90:17:82:e2:4d:
         b6:b9:e5:0e:cf:4e:47:a2:0a:41:c3:48:d1:4b:30:c7:a7:05:
         02:01:f5:26:61:ab:1a:42:55:fb:64:45:53:76:f7:09:86:ec:
         da:59:17:e4:a4:f4:a7:bd:b3:8f:c1:b7:4f:b6:cd:d9:05:8c:
         f5:76:b1:73:2b:cd:28:d1:bc:d7:07:da:5f:79:e3:68:78:00:
         32:02:35:67:80:e6:25:ac:06:98:7b:fc:39:15:a1:e1:dd:19:
         38:c5:76:1a:bf:2b:f5:bc:11:cf:19:6a:c5:fa:f1:4f:ed:2a:
         2f:d5:d5:2d:5b:9d:da:d4:6f:ba:cf:61:3b:42:ab:78:fd:4b:
         0d:47:82:cd:d5:7f:ff:6a:33:40:e0:47:72:16:2d:6c:49:2f:
         7f:fd:57:aa:95:0e:9e:f2:75:ad:9b:78:7b:6b:c3:0f:61:d2:
         5c:87:70:81:9d:68:10:4b:c0:1f:36:86:7e:59:41:45:e6:31:
         d3:8b:48:f8:fd:97:11:c9:a8:89:92:09:49:20:c5:04:4d:6c:
         29:c8:95:83:9e:52:c4:99:49:c7:57:59:2c:53:ed:cc:d1:ba:
         c5:93:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:50:04 2025 by rpki-client