Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
File:                     841bdf52-afcf-38d3-8523-7e5074f81419.roa (raw, json)
Hash identifier:          S1lwD0jhvVFpopDrfAfz1McUaH69SoJ8+62dS18eSJ0=
Subject key identifier:   44:68:1B:10:C1:81:DE:FC:8F:9A:09:3B:DF:7B:79:CC:4A:7A:D3:99
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C3B97EEBA07F532FE4C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.210.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c3:b9:7e:eb:a0:7f:53:2f:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=bda85601-adbd-4ce1-9b4f-259ef4f30633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:bc:7a:e3:d2:a2:29:d3:58:bd:c2:74:e0:
                    c6:72:d3:8f:1a:7f:f4:13:57:a3:06:d8:2d:af:e4:
                    13:fc:76:3e:85:77:f3:f0:33:c1:4e:b2:13:7d:12:
                    38:bb:24:1f:31:49:15:56:dc:a7:51:50:d2:46:6d:
                    ea:8a:be:1a:5e:67:fd:3e:11:c6:57:d2:b2:d5:6a:
                    35:d2:ea:fe:df:ec:58:9c:59:f5:e8:b0:a5:52:0e:
                    29:3d:30:f2:dd:de:98:6b:02:44:6a:61:a9:0f:b8:
                    a2:56:8d:5c:96:de:3c:f0:76:59:c0:01:80:d8:e4:
                    8e:b2:e8:ac:15:74:ef:71:1e:3b:ef:a0:93:5e:89:
                    8c:29:74:1a:2a:2b:eb:3c:6d:8a:a8:d6:8b:bc:17:
                    fb:d0:cd:3d:e2:0d:3e:5a:d4:07:ad:7d:d1:a0:be:
                    2e:99:c8:10:f8:c0:3e:84:36:7c:fd:18:eb:6b:1c:
                    f5:38:a6:af:f1:b1:8d:4c:4a:9f:f6:b7:1c:9c:a2:
                    1d:e9:11:00:02:37:2d:b0:99:c7:e1:38:e1:3e:7b:
                    ee:7a:69:cc:cc:b4:92:7d:f5:73:e0:4f:dc:ed:f6:
                    18:bc:df:66:48:4c:8e:d5:2f:be:96:a5:86:af:7c:
                    6e:a2:60:5f:30:a8:fa:2c:22:e0:70:a3:e7:89:3d:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:68:1B:10:C1:81:DE:FC:8F:9A:09:3B:DF:7B:79:CC:4A:7A:D3:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:a7:cf:63:dd:91:ee:22:95:37:86:60:53:7c:c0:e9:6e:
         ef:40:91:85:cc:f5:a6:4f:b4:6f:1f:bf:6e:62:57:71:ae:7e:
         e4:d3:b1:12:7c:d3:47:cf:07:dc:cc:11:eb:11:02:89:ef:9c:
         e8:c1:61:8e:92:c7:de:14:44:cf:b6:10:19:fe:a5:88:d5:5a:
         f7:5e:f6:16:e7:b5:9e:3a:e9:48:6e:3b:85:3c:33:6b:03:e8:
         30:70:ed:da:16:d1:55:2f:50:24:48:78:d9:b1:61:91:2e:da:
         41:17:48:0a:35:70:ec:a6:0d:c5:73:6b:f7:66:9d:4c:ff:08:
         f4:9d:d8:10:38:34:26:c4:bc:30:7d:e4:37:ed:07:48:3d:9b:
         d4:41:c1:cb:7e:44:7d:7e:e0:55:6d:86:eb:50:f3:bf:62:0f:
         9d:0f:eb:d7:8b:23:ba:cd:a1:13:e3:62:44:21:2e:5e:a1:76:
         be:3c:20:bd:58:0d:fa:fe:95:1c:93:39:26:0d:6d:79:3f:f0:
         9a:c7:b5:f0:ca:a5:80:58:10:e5:7f:4f:5f:72:aa:c7:c9:11:
         32:bf:2b:af:e7:43:aa:33:9c:57:10:00:e7:37:b7:03:0a:d6:
         42:05:29:e0:d9:2a:a0:3f:2e:23:5d:97:77:d7:49:1b:94:fb:
         10:04:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:29:13 2025 by rpki-client