Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/55dd9199-6470-3988-a74a-8cf458e7d207.roa
File:                     55dd9199-6470-3988-a74a-8cf458e7d207.roa (raw, json)
Hash identifier:          stASJMNRLmIJTEmQFuzVSSjyVCGc6TITXr7MOlB8yik=
Subject key identifier:   87:AB:28:BB:3B:81:C8:D4:57:72:CE:4E:56:72:3C:86:B5:D4:B9:D1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C96BBE47875939C13B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/55dd9199-6470-3988-a74a-8cf458e7d207.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.248.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c9:6b:be:47:87:59:39:c1:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=49e65b7d-8bdf-45bb-b0cd-9a490e74217f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:77:4a:f9:7e:9e:d8:df:4c:3c:ba:46:34:
                    ba:4e:cf:b1:83:89:be:24:54:54:76:96:5e:da:10:
                    26:46:72:5c:eb:f1:62:41:65:6c:eb:c9:92:22:67:
                    ba:f9:09:c8:1d:04:e1:67:4a:ad:33:0d:27:a1:bf:
                    c0:ff:fd:ee:29:d3:ca:18:0e:8a:c0:e5:38:0f:b2:
                    45:bf:6c:90:1d:d7:c2:8e:b7:b7:00:dd:1f:f5:f4:
                    49:7b:2e:76:85:5a:81:c9:5d:70:88:bb:a1:6d:41:
                    a6:3e:36:25:59:06:2f:66:27:1f:61:06:63:e7:62:
                    41:0e:d5:82:9d:0d:13:94:83:d5:e1:09:5e:c1:6c:
                    ad:37:5c:27:1e:62:b2:99:60:65:fe:80:f3:24:be:
                    5d:b4:c8:81:da:99:e0:17:db:81:e3:9e:83:7c:df:
                    e5:41:bf:e6:d6:d4:12:18:07:50:9c:86:b4:f8:04:
                    dc:69:a1:45:0e:30:b0:86:e5:6b:d5:e2:4e:3f:50:
                    c9:f5:a5:1a:9c:c7:bd:51:a8:2c:ac:70:8e:7d:89:
                    a8:c6:e9:8b:1a:68:ec:e0:6b:f3:19:cf:c7:94:48:
                    2e:78:26:70:6f:56:0d:90:34:f7:b0:9b:d7:33:58:
                    66:d2:76:ce:59:ab:29:e2:e5:2d:92:c0:61:ca:ed:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:28:BB:3B:81:C8:D4:57:72:CE:4E:56:72:3C:86:B5:D4:B9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/55dd9199-6470-3988-a74a-8cf458e7d207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.248.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:50:e6:87:95:18:14:1e:cc:39:8c:d4:24:49:e0:b0:a5:
         80:ac:57:9b:a9:f3:ac:9f:1d:e9:56:8e:31:0f:48:b5:90:4e:
         ec:07:26:c1:f4:15:e0:05:f0:ea:16:b6:d1:e5:05:52:a9:65:
         e2:fe:a2:5b:10:bd:df:a0:53:eb:bb:a3:a2:1d:eb:1f:ac:ac:
         5c:e2:f8:a5:b4:6f:ee:1f:28:53:7b:f6:47:7d:7f:47:55:ca:
         14:03:6d:a0:75:d5:1d:1c:49:eb:7e:72:5f:a4:24:14:a6:7d:
         a3:fb:f6:7a:5d:3e:8d:77:9f:a5:c1:1f:47:38:67:ef:28:a9:
         d4:95:1c:44:f7:cb:6e:a0:87:9c:6f:28:e8:f9:21:34:70:11:
         fe:b3:91:24:70:15:66:11:7e:32:eb:f2:6e:b7:c8:02:cc:62:
         53:ff:d5:77:67:d7:8e:53:3d:2e:52:b4:64:e7:28:99:d2:90:
         39:4e:ae:d7:5e:95:91:c1:6b:14:01:2b:1c:45:4c:a2:6d:75:
         57:dd:d6:dc:50:04:6d:54:2f:25:ef:49:73:3f:24:fd:2c:f6:
         6a:aa:bb:dc:bd:b7:6f:73:33:a9:c2:af:0d:26:97:ca:54:f7:
         fa:be:50:fe:73:16:d0:aa:94:05:11:3c:9c:d9:f2:d7:bb:c3:
         ec:56:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:42 2025 by rpki-client