Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa
File:                     53848da7-1182-36ef-b0d2-4d00728cdbd6.roa (raw, json)
Hash identifier:          JFZv/4+bUImpHS8JfhWBnWCCxzf5mqEtUrLP5bE/KGw=
Subject key identifier:   63:48:E1:82:6F:DA:78:8E:D9:34:73:7B:D9:FF:D0:8A:FA:35:F2:37
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C88C63332503C3B5FEC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.220.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c8:8c:63:33:25:03:c3:b5:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=eafb027b-6483-4304-ae63-d7174e76a051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:f5:23:30:c8:36:38:80:54:c2:fc:db:01:
                    41:78:d1:ad:ec:67:d9:c0:b5:dd:70:bd:3b:e5:1f:
                    b5:bf:75:a7:30:ce:5c:a6:6f:9b:f5:56:bd:56:11:
                    4a:9f:63:7e:49:68:24:84:b3:ba:cd:23:fa:29:35:
                    92:57:44:9e:77:7a:4b:eb:24:b3:0d:3e:79:95:4e:
                    49:f9:c4:48:ce:24:ee:25:58:57:c9:f5:7d:91:19:
                    4c:7a:f6:f2:ef:9b:26:6d:04:2c:71:20:a8:5d:0f:
                    8a:96:e9:11:8b:46:13:41:92:15:1d:b6:98:c3:0b:
                    b6:dd:16:f6:23:e3:0e:41:e7:94:eb:1f:d0:6e:02:
                    68:d5:d1:d8:57:36:a8:68:4f:80:36:57:34:c1:d2:
                    0e:46:52:23:04:bd:f2:89:4c:ab:e3:02:97:8e:2c:
                    b0:60:8f:a5:d5:7b:ce:a2:ae:d6:b5:f7:a4:38:1b:
                    2d:e2:d9:18:63:c2:4b:56:a6:f7:de:1e:9e:96:05:
                    10:ac:26:51:dc:fb:1d:c2:27:f4:97:2f:78:91:89:
                    7a:a3:50:7a:89:b4:9b:3d:3a:1e:a8:f3:90:6d:83:
                    f6:3c:99:e8:0f:d5:6b:4a:79:b2:10:9e:19:0b:88:
                    2c:6c:7f:c2:b6:c1:e3:a2:05:04:67:76:cd:1c:23:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:48:E1:82:6F:DA:78:8E:D9:34:73:7B:D9:FF:D0:8A:FA:35:F2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f4:59:39:91:93:e2:af:cb:2b:fd:43:96:c9:2d:d1:7c:42:
         d1:b9:22:c1:75:2e:5f:c7:7b:87:77:b1:33:e7:bd:e6:fc:e6:
         ce:44:3a:36:4e:8f:02:d0:cc:3a:41:36:39:02:d9:12:43:ac:
         7f:5c:ca:24:90:b3:1b:b9:f9:be:e7:b2:7d:4f:5f:82:b9:6a:
         28:61:58:7b:bc:d3:2a:4f:8a:66:b9:63:5f:0a:15:21:22:61:
         63:93:a9:0d:dd:29:51:26:40:7a:26:89:4c:78:77:e8:cb:71:
         1f:1e:63:04:fb:19:7b:dc:67:16:11:30:01:f8:ad:81:9c:30:
         1c:9f:cb:23:3b:76:89:94:f6:f3:0c:74:91:16:b7:72:c7:4d:
         34:8e:ca:53:10:40:d7:c6:4a:d4:d6:3d:32:52:f9:f7:12:c5:
         95:60:06:2b:4d:c4:b0:89:b6:58:c8:6d:04:39:29:22:a4:f7:
         b2:2c:f3:09:f3:e7:af:ef:80:26:c4:a1:f0:fe:9f:96:a2:55:
         e8:bb:7a:8a:71:51:2c:f6:27:cb:82:b5:e4:f5:96:f8:6f:50:
         29:4e:8e:24:7f:ac:a1:9b:c1:ac:cc:3b:09:fe:da:fa:55:be:
         5e:88:03:45:95:b7:59:a4:08:dd:71:e8:c9:cf:ec:66:67:2f:
         fc:f6:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:51 2025 by rpki-client