Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa
File:                     db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa (raw, json)
Hash identifier:          MvKqKbg9buB86W1csq/GmwkZe90Ll5+9+b+DUyVtpq0=
Subject key identifier:   69:35:C4:89:27:5B:72:EA:CD:B1:14:88:79:A0:68:32:3B:08:63:FB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C04442D979F5514D4980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.210.32/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c0:44:42:d9:79:f5:51:4d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=2224eb87-8fef-4a93-8dc9-484a41473a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:fa:83:dd:c6:af:38:dd:06:7d:de:70:22:
                    10:fc:ff:ba:b1:27:60:6c:64:48:a3:03:49:01:92:
                    19:31:45:7a:cd:20:48:81:d6:9b:6d:a5:cc:56:27:
                    85:57:e3:a4:0e:8c:30:5a:7a:f6:e3:f6:1b:4d:40:
                    65:3d:46:e3:0d:0f:92:a0:a5:67:7e:c8:87:dd:4c:
                    a6:75:4a:55:4a:5e:b2:51:24:61:84:8e:e0:8f:3e:
                    a2:1f:39:b0:bd:e7:98:1b:27:d1:69:9f:2e:74:f3:
                    8e:fc:40:16:e0:d4:04:87:2c:53:0e:a9:99:5e:90:
                    83:f9:20:fa:58:da:47:e1:2e:cc:32:53:a2:cb:ae:
                    a6:88:b1:98:d4:1a:ec:cd:5e:eb:3a:32:43:49:ab:
                    45:40:10:2f:f5:11:09:68:2b:bf:01:8e:aa:df:02:
                    dd:47:12:b5:18:14:aa:c5:b2:b7:27:e6:f1:e2:e9:
                    26:54:2a:22:14:48:ab:d0:9b:b1:c5:58:ba:42:64:
                    58:16:67:b4:b1:bd:ff:67:f3:97:57:ac:a1:dd:b8:
                    b5:9a:f6:7d:35:ac:10:61:ae:a0:79:ce:a1:44:63:
                    91:d8:ca:bd:3c:9b:f8:d2:ec:26:12:b4:3e:39:f4:
                    02:a6:4a:99:05:66:2c:5d:af:d4:1f:da:40:18:22:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:35:C4:89:27:5B:72:EA:CD:B1:14:88:79:A0:68:32:3B:08:63:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:41:04:16:5d:33:38:75:ab:ca:23:9b:3b:84:f1:6a:54:
         03:b1:a0:37:5b:21:29:e0:e8:04:2f:91:b2:05:49:59:2b:3d:
         fc:40:a8:d8:9c:63:a4:26:8a:7c:6f:e9:b2:43:49:e5:a3:26:
         06:b6:76:99:ce:0b:d0:c5:ca:85:06:91:64:8a:5c:7d:68:61:
         c0:28:e7:ab:55:7d:21:be:50:85:bf:f6:74:8a:80:3e:49:7c:
         66:69:b5:d5:a8:b7:e3:67:4c:bd:ac:32:a0:ce:db:d5:d2:35:
         ec:ef:82:ef:91:f0:96:65:34:6c:c9:3d:47:79:9e:0f:22:4b:
         3c:2b:a8:8d:f5:c9:a4:ca:66:3b:a8:b3:9c:d2:2e:93:88:28:
         8f:68:5e:73:40:c8:1c:75:7d:bd:31:88:65:c6:c8:3f:08:22:
         b1:53:58:1a:4c:af:0a:97:45:75:15:4e:41:fe:02:b5:6f:61:
         7d:c0:68:dd:95:5d:80:78:ed:bb:1a:68:d5:ae:a3:41:c0:45:
         14:b8:e7:0f:5a:a3:34:b1:c2:c0:75:91:fd:bb:0c:67:94:92:
         2a:0d:8f:d0:c9:67:88:2a:9c:d1:f2:e6:4b:00:7d:86:e0:44:
         91:33:57:c7:9d:74:0f:41:a1:72:54:d2:44:47:70:af:9c:47:
         7e:e4:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:33:41 2025 by rpki-client