Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa
File:                     3968a775-78b5-32df-a97b-34089e5fd0f8.roa (raw, json)
Hash identifier:          XfzVOTZ/5XkciSoNaQStyYgy92e81smT2+mP08rPhHc=
Subject key identifier:   37:58:4E:2C:31:DE:CC:9C:58:48:55:82:0F:90:FD:42:38:32:27:A8
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D649898D4BF025DF1AA0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        151.101.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d6:49:89:8d:4b:f0:25:df:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=ca2dc822-a3f3-426c-b087-98ca76166005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:01:19:13:0f:e3:11:d4:e5:75:b3:0d:98:
                    75:84:78:f3:83:2d:bb:af:db:9a:79:7c:3a:78:bc:
                    af:9b:ca:28:72:6b:34:d1:42:29:62:4f:54:bb:14:
                    5e:96:d7:97:b4:0b:87:c6:22:bf:b0:45:f7:77:a3:
                    ca:4d:93:41:3c:50:d3:69:35:a3:72:80:5f:3a:e0:
                    31:9a:ea:ad:a5:37:87:cc:1e:d6:68:ea:d4:70:12:
                    9f:88:3f:5c:d8:8d:e4:6c:6f:e4:07:33:e4:ab:54:
                    7e:03:50:d9:cd:66:78:6b:38:21:18:ae:ab:29:cf:
                    06:c2:be:bf:de:b9:e6:82:15:ac:a7:71:38:c5:d8:
                    e0:44:60:98:60:cd:7c:b1:43:59:5c:69:52:61:90:
                    30:f4:45:5e:b2:43:56:a0:08:aa:1f:c3:cc:4c:2d:
                    f0:17:2a:cf:2f:5a:a7:98:5a:92:ad:7a:d5:bb:37:
                    81:d2:cb:33:f7:cc:72:fa:bc:f0:85:0d:fb:ea:e5:
                    47:29:6a:46:c6:62:f6:e4:0e:95:ad:7a:3a:c0:ff:
                    47:5c:5f:bc:f1:de:66:2a:1e:5d:36:50:c0:d3:3a:
                    9b:a6:7f:2a:d5:a3:a8:b7:7e:38:2d:91:d5:4e:1e:
                    80:51:f5:e8:93:62:5e:f2:cc:86:02:52:14:b3:31:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:58:4E:2C:31:DE:CC:9C:58:48:55:82:0F:90:FD:42:38:32:27:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:30:f9:58:de:98:3b:05:e0:a7:bb:b9:67:39:65:d5:a2:
         20:e9:23:54:35:85:39:a5:2b:14:e6:dc:eb:c8:b2:4e:14:13:
         a4:24:74:ff:4a:b8:0e:ac:6d:6b:23:d4:7a:d7:c8:3a:0b:de:
         48:5d:bd:3a:f6:5f:88:b6:8b:84:77:25:cb:51:98:63:bc:50:
         49:e3:af:c5:07:15:5b:75:d7:09:38:cb:c2:fa:fc:d9:d1:cf:
         36:f0:2b:66:76:cf:fc:7e:ba:e3:16:1c:82:32:33:92:55:14:
         c2:10:3f:a8:33:63:ce:29:d6:72:25:32:36:5c:ae:3d:07:9e:
         06:b7:77:51:a5:df:40:f9:ee:3f:5f:e5:21:ea:2a:12:3e:3c:
         3e:8c:a2:b0:76:84:df:37:74:f6:6c:55:a1:4c:dd:ca:3d:b5:
         77:12:0c:7f:d1:4f:dc:b3:ea:be:b8:82:36:6c:e4:7d:a3:6c:
         d4:5f:bc:82:04:43:0b:dc:c7:66:85:45:6f:40:45:31:f3:2d:
         68:05:8d:21:a9:d5:41:85:b4:82:88:dd:d4:4d:48:b8:36:ec:
         44:64:30:8e:02:c8:df:3d:f0:01:ee:c3:38:60:f3:81:ec:99:
         f2:6e:29:a3:c6:16:19:18:1e:31:63:3b:b9:60:67:ef:7b:64:
         1a:93:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:34 2025 by rpki-client