Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
File:                     a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa (raw, json)
Hash identifier:          0E7KxJ/TMQVZcWvN5eX4VzfGx/cgGCPlnGPtEJ5LOmg=
Subject key identifier:   56:8B:3E:6E:13:92:00:DD:46:78:7A:E4:CA:DD:D2:4B:14:6D:AB:A5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C2580C7EA8E79F474F40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        172.111.122.16/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c2:58:0c:7e:a8:e7:9f:47:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=7ef7dc04-11d3-411f-9d20-3465239634ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:49:86:ae:be:b4:e4:99:06:ce:bf:f2:d3:
                    af:0a:f2:57:0d:f5:73:fd:f4:a0:2d:de:d1:33:63:
                    51:19:70:ce:15:bb:5d:aa:45:0c:3e:00:42:f1:ee:
                    48:b0:84:4c:60:c6:d4:6f:68:ce:79:e6:a0:d3:6f:
                    f1:9f:a0:3d:b6:4a:65:6f:c8:f9:7d:8a:ce:0c:17:
                    23:65:9a:50:f0:6d:f9:18:58:eb:7f:64:94:a4:f3:
                    08:e3:3f:19:37:21:53:b9:f0:6a:a2:04:bc:07:0b:
                    5e:8e:83:f6:bb:fe:82:0b:cd:e3:cc:fe:fd:e0:87:
                    2d:ab:7a:25:f4:48:7c:3f:52:20:8e:6d:ad:a1:18:
                    ee:da:6c:51:22:39:fb:f7:7f:f3:99:30:51:d2:15:
                    ad:a2:c2:a9:c3:08:d3:49:6b:50:ee:01:7a:e9:21:
                    69:1b:a8:d5:6c:03:f7:b8:a9:8f:fc:f1:c9:3c:6c:
                    c2:6e:f0:d3:bd:30:e3:c8:74:c2:31:1f:b2:dc:e0:
                    d2:55:85:18:15:ee:ca:bf:57:6d:c6:54:b0:8a:08:
                    96:eb:eb:01:34:31:77:88:8c:eb:10:b7:54:04:23:
                    0f:42:46:a9:b0:7b:d9:8d:2e:df:3b:52:ea:77:de:
                    56:2c:9c:e8:83:fa:c2:42:19:5e:74:47:9b:0d:8b:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:3E:6E:13:92:00:DD:46:78:7A:E4:CA:DD:D2:4B:14:6D:AB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.122.16/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:48:15:88:dc:66:c6:24:71:82:d6:59:24:86:d0:d0:36:
         52:a2:23:1c:89:75:ca:a7:be:0d:0e:d5:06:42:7e:50:b6:9b:
         f3:51:ef:03:c0:46:4b:09:7f:2e:22:a9:ef:96:1b:45:d4:09:
         11:28:33:8c:6b:d5:8e:0c:af:2e:2f:a8:b4:ae:59:77:62:6a:
         ba:02:14:f1:7e:d8:39:44:6c:24:15:a9:8f:79:bc:e9:95:71:
         f3:79:6f:e7:2b:e3:ca:f4:c5:35:25:4e:dd:d2:a9:90:8f:eb:
         05:93:8c:a4:e9:74:27:c2:cd:c6:0d:e5:40:e9:e0:89:c5:1d:
         7d:71:93:ad:9f:40:9e:32:9b:d2:66:03:a1:ce:7f:63:f3:e2:
         56:e9:1e:9a:c7:a0:69:81:3c:21:11:d0:9d:2f:74:a4:bd:d3:
         20:3d:1d:79:28:29:a2:91:d9:fe:25:d9:08:18:28:8e:6b:57:
         69:2e:4b:8e:0b:bc:c3:09:06:1c:4b:bc:ea:57:13:a1:8e:59:
         bc:ad:80:f8:fc:26:a1:a1:f0:1e:a5:74:ca:18:2f:77:84:eb:
         ef:b5:38:31:88:85:88:de:1e:6e:6f:31:54:b3:c9:e5:34:ad:
         5c:86:b2:55:18:dd:0f:6e:4e:82:31:7e:23:bd:d7:3a:43:75:
         37:ea:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:52:50 2025 by rpki-client