Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa
File:                     c32f2009-76a6-322c-9d24-bb6fb413c863.roa (raw, json)
Hash identifier:          4w7AADsu6rvrZ5JFr6/U3r0a9SLPRx51Tn+e0LEFDh8=
Subject key identifier:   4F:27:7F:D2:F0:08:5A:66:28:39:E1:2F:8F:CC:90:A3:D3:D7:FB:8D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C0F359179C500042E800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.242.0/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c0:f3:59:17:9c:50:00:42:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=0fd10178-1207-4018-adc0-e5403b90f301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:9b:67:ca:89:99:b9:08:1b:e8:f2:59:4c:
                    89:1b:58:d8:e8:58:1d:09:a0:99:03:4e:4e:92:03:
                    3c:63:23:f6:09:ab:e0:21:72:f9:f9:1c:bb:d5:53:
                    56:b3:f9:0d:b7:6a:eb:23:85:fe:8c:35:49:d3:d3:
                    96:0d:de:57:d6:10:22:5e:ae:04:dd:ce:42:e3:14:
                    58:54:eb:2b:16:80:77:61:1c:e2:62:c9:de:a6:0f:
                    94:d8:98:fb:78:20:4c:10:1a:c0:9d:50:c9:cd:11:
                    19:48:62:9f:a1:2c:ba:c1:db:d5:c9:fd:b1:cf:42:
                    d6:74:5d:f6:96:5a:ad:9c:09:0f:b9:1e:0d:39:5a:
                    53:19:98:61:c9:b8:90:73:91:aa:21:6d:a0:ed:03:
                    e1:27:e5:59:78:0c:51:6f:c0:89:14:b0:9c:04:a1:
                    67:a0:f7:8d:2c:ee:3b:78:33:a0:54:90:1a:0d:02:
                    e9:5d:74:71:74:53:8b:1c:f2:81:57:94:39:f5:99:
                    86:19:16:8b:67:12:47:4f:a0:1f:ee:c1:20:ca:99:
                    42:72:96:e2:75:4e:d1:1f:9d:90:1c:8d:ec:aa:7e:
                    93:0c:af:c4:9b:a8:cc:ef:9f:ef:8a:1c:59:e0:06:
                    ba:18:55:1a:16:4f:b2:58:59:02:3d:b0:49:12:75:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:7F:D2:F0:08:5A:66:28:39:E1:2F:8F:CC:90:A3:D3:D7:FB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.242.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b3:f4:62:cc:57:ae:d7:8d:f9:da:d8:bf:9d:14:6a:7e:8e:
         0d:ae:45:23:73:fb:67:c6:e1:a6:92:12:31:c4:dc:21:75:74:
         48:45:39:17:fa:20:b5:15:a5:03:67:7b:c6:c8:83:94:d3:b7:
         da:b5:36:37:a1:75:ea:93:fa:f4:28:b0:17:3f:a0:09:34:50:
         57:99:2f:0f:81:9f:4e:42:5e:46:35:27:d2:76:d5:c7:dc:e5:
         df:8a:3e:f0:56:01:99:c4:49:01:24:9a:e0:7d:5d:30:23:ab:
         81:11:12:02:49:0d:94:cb:f3:fc:a7:a6:47:5e:56:1b:62:b2:
         70:39:70:7e:60:7b:09:e1:18:80:3d:d0:6e:7f:b2:00:f0:0e:
         2f:af:25:02:43:1d:da:a5:c5:6f:bb:18:12:00:f7:05:af:b9:
         e0:9c:e5:e9:c3:b4:e6:9c:85:25:02:a5:26:ed:80:51:ec:9f:
         bd:c2:15:81:c8:5d:30:22:d2:3f:4c:a7:7d:fb:2c:08:d8:77:
         31:03:61:fa:69:f2:50:b1:f2:5b:ad:a3:14:f7:27:8c:41:40:
         57:e2:83:e9:53:ba:b7:28:44:c1:3d:06:b0:5e:64:3b:cd:85:
         87:9d:8f:41:02:f2:09:ae:7a:41:e1:3c:3e:ea:bc:a6:2d:ce:
         c9:93:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:07 2025 by rpki-client