Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
File:                     d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa (raw, json)
Hash identifier:          NsjdyLpeOkcigrHIpzOwxxo24w5rXdqXAuJy3TFIvrg=
Subject key identifier:   57:3A:6B:D7:75:45:84:43:80:3E:DD:2D:E2:C0:93:EA:76:16:42:CB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C43ED8569DB4631C0200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.216.0/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c4:3e:d8:56:9d:b4:63:1c:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=66b3695c-0d76-4676-8265-358ed5399efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:dc:2f:a7:2d:24:43:3a:a9:c9:28:4f:df:
                    75:20:48:27:f2:5d:7a:d4:cc:36:c4:3a:f7:51:d6:
                    0d:38:72:f0:af:85:f8:df:28:26:f8:14:3d:11:2a:
                    f9:35:ae:21:5b:1e:92:83:49:13:b8:fd:de:c9:f7:
                    6d:fa:a0:c3:1d:14:a1:5a:89:d7:63:16:f2:c0:cf:
                    96:a9:c2:ac:b9:dd:15:76:ed:98:1d:c7:0d:e0:c9:
                    8a:85:e8:42:7a:b8:04:58:57:b5:cb:66:33:81:a7:
                    3d:9f:8e:06:89:8b:a5:07:02:6f:82:79:0e:8c:70:
                    60:80:5e:e0:27:6a:61:64:54:65:86:83:14:83:13:
                    90:cc:1e:d9:cf:18:13:02:70:f2:8b:d8:f7:e5:e8:
                    d5:07:d0:a4:45:f4:ef:31:86:b0:18:92:49:15:7b:
                    7b:b8:56:11:00:56:00:6d:a4:e1:3f:2d:84:14:53:
                    d9:8f:25:74:e9:3c:90:5a:6f:d0:f0:7d:1f:15:e2:
                    81:96:55:28:52:94:b5:ef:14:5e:42:39:a8:ba:8b:
                    09:ba:77:5a:c3:b8:cf:93:bb:d8:31:52:42:78:ce:
                    ea:2a:f4:7f:4a:f4:5f:9a:eb:ca:49:fc:85:c5:d7:
                    6a:3b:fb:98:ef:21:a3:6c:96:2d:14:48:b6:c2:11:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3A:6B:D7:75:45:84:43:80:3E:DD:2D:E2:C0:93:EA:76:16:42:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.216.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:49:f1:17:7b:e5:a5:65:c8:3c:61:0a:6c:00:f7:97:2a:f5:
         74:d3:cc:b2:2f:12:94:3b:15:48:35:c7:21:ad:8e:43:e2:c4:
         59:62:8b:b9:31:78:8a:13:9e:f4:78:d7:a4:eb:9c:8e:cd:e1:
         ac:38:c4:b8:9f:ac:58:0d:cb:18:8c:7d:b8:92:99:19:a5:84:
         12:b4:67:5a:91:56:07:92:89:8f:14:10:a3:ad:0b:ce:07:3d:
         7f:c2:ac:fb:6b:36:fe:52:c2:1b:e1:12:df:3f:89:2d:14:c1:
         7f:95:d9:5a:24:6c:e1:38:b7:8d:01:08:8a:5e:a3:93:20:75:
         b7:69:5f:2c:d3:9c:19:6a:17:00:db:19:58:1d:38:46:a6:71:
         7b:ed:db:22:71:9b:63:17:6b:ed:46:ea:86:df:d4:20:c2:d5:
         c5:d7:de:2d:7d:26:a4:96:cc:2c:ea:49:e4:83:01:0b:f8:8d:
         53:30:59:82:7f:00:6e:4d:08:e9:5f:8d:02:ed:c2:bc:9b:e1:
         01:99:84:49:90:da:d5:ce:72:02:94:5b:fd:6d:78:48:be:db:
         6f:67:b7:b5:d5:6a:ac:fc:9d:3c:16:77:75:0d:5c:8d:8b:90:
         fb:bc:54:83:37:62:16:a8:50:4b:df:e7:d1:58:13:de:66:cf:
         e5:05:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:56 2025 by rpki-client