Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa
File:                     5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa (raw, json)
Hash identifier:          U0y+/rojL4JYLWaFfdwh37tiJ/5QRFKM9Zy1Y2vfT4g=
Subject key identifier:   98:8B:9F:09:E6:B4:90:64:A8:FD:6C:4D:0B:31:0C:B6:09:1C:99:3E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C0B3E868C0E4951B9F80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.212.96/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c0:b3:e8:68:c0:e4:95:1b:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=7cd6f230-045a-4bb6-af0d-2985df3a4ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:03:ff:6b:c3:bb:eb:89:fa:da:5b:4d:9d:
                    94:bb:f7:c5:69:49:87:15:fe:42:c3:9b:11:31:e7:
                    4e:74:fe:2c:2c:5f:c3:ac:ad:ed:89:d7:e3:14:8f:
                    b9:5a:f5:2f:31:db:14:e7:79:f9:ed:1d:07:90:a8:
                    2f:c4:e0:e2:91:21:4b:28:ec:7e:ba:72:b1:8c:d9:
                    72:40:d2:29:17:be:3c:83:02:57:7e:d3:50:e5:26:
                    52:91:e3:23:de:8c:20:bf:2e:05:30:3d:d1:fe:84:
                    46:7c:b0:ea:04:6e:16:d5:07:7e:35:c5:ad:d3:db:
                    fc:bf:74:1e:9c:d2:a4:e1:d5:c2:48:e2:ac:a8:d0:
                    56:e0:9f:66:96:61:0c:07:6b:10:fb:2b:29:3a:a7:
                    e4:ba:bc:10:6c:2a:cf:f4:c8:bd:a2:03:4a:a5:78:
                    93:9b:26:43:cc:78:f7:10:96:95:8b:fc:de:02:58:
                    cd:22:5e:80:54:c8:d2:94:d1:6d:d5:89:4a:2d:1b:
                    c2:fe:18:13:dd:f2:7b:46:3d:e0:1c:3b:a8:ff:b1:
                    e8:d0:51:c1:be:0b:13:d1:31:14:42:c9:7e:17:51:
                    e0:d4:92:e5:bb:8a:3b:c4:54:1f:a2:94:31:d6:6c:
                    c3:e9:8d:61:e2:4c:eb:8d:e3:f9:cb:de:56:8e:e9:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:9F:09:E6:B4:90:64:A8:FD:6C:4D:0B:31:0C:B6:09:1C:99:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.212.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:0f:27:b9:bd:41:8e:89:22:5c:0f:a6:87:32:42:6e:4f:b6:
         01:ac:d6:55:af:d5:f4:26:7b:de:f4:30:04:28:0c:48:24:45:
         72:37:f9:2f:c7:2c:ee:ee:57:8f:f4:d3:b0:1b:19:e3:74:9c:
         0b:00:13:f8:f3:0b:a9:60:c6:92:21:bd:99:5b:ed:a8:3c:cb:
         19:13:e1:fc:6b:80:eb:e8:8c:86:dc:95:11:62:2b:18:05:c1:
         98:a2:ed:39:df:d7:f6:6b:38:cf:9f:13:6e:7e:53:55:5e:ca:
         61:2c:3f:10:d6:39:13:3c:5c:fe:91:94:17:97:0e:ad:22:04:
         96:60:89:a8:71:d7:61:50:72:c4:b1:45:17:5b:e2:80:b5:6f:
         3b:f2:70:f3:6e:aa:76:f1:d8:c1:01:6c:32:6a:03:5c:87:0d:
         2a:67:77:b1:cc:05:70:ce:32:f9:53:07:bc:fd:c3:8b:d9:aa:
         75:9b:62:44:20:11:df:06:30:2a:49:48:9e:69:4b:80:22:53:
         12:45:77:a3:68:14:b1:11:c4:41:34:ab:5b:bd:fd:5b:25:77:
         59:c4:eb:86:a5:7e:0b:0a:3f:8c:e7:c1:2f:f2:e5:c2:2d:95:
         23:d2:6f:8a:7d:90:67:20:4d:9a:e6:6f:98:db:e5:82:0e:bb:
         1c:f2:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:18 2025 by rpki-client