Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e7ec95d9-dc78-3fcb-9fba-4b75ba048516.roa
File:                     e7ec95d9-dc78-3fcb-9fba-4b75ba048516.roa (raw, json)
Hash identifier:          qXakfrGVfExBSH6I2jY+R091Mn8iLxHOetb3m2vigeM=
Subject key identifier:   95:7E:CB:CF:98:41:99:7F:30:05:0E:58:E4:C5:8B:5E:70:73:9C:81
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C8F9EE045117FB6C8200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e7ec95d9-dc78-3fcb-9fba-4b75ba048516.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.241.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c8:f9:ee:04:51:17:fb:6c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=40d9085c-b09d-4cd9-a55a-3094b32fed44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:bd:17:05:a9:16:db:e7:8f:6c:4e:ee:b3:
                    34:bd:f8:52:a9:2f:5c:d9:55:52:03:70:2e:7c:fe:
                    5d:00:a3:3e:5d:99:6b:e7:fc:c9:e0:0b:dc:d6:a1:
                    bc:87:94:a2:6d:9e:08:76:27:3b:27:19:96:ed:24:
                    99:5f:1d:02:ed:3b:b4:1c:77:52:3c:3f:32:5f:e7:
                    11:3a:98:1b:2e:0a:d1:86:1a:e3:ca:56:1f:12:90:
                    1b:dd:98:a7:4d:70:ec:32:29:de:3c:36:39:7f:56:
                    9d:75:d5:ba:37:71:fb:d2:18:1a:2a:c9:21:f3:c6:
                    81:60:97:e3:1e:e2:bf:47:db:3f:bc:79:47:d6:9f:
                    77:33:18:93:fe:bc:9b:6f:a8:c9:cb:66:9a:5c:1e:
                    44:08:42:67:e4:16:e2:aa:48:e9:0a:f9:14:37:68:
                    af:17:78:d1:40:52:a7:7b:0b:2b:f9:9a:09:48:05:
                    07:eb:46:f4:eb:13:de:34:67:9a:c3:6f:58:41:78:
                    63:fc:5d:6b:45:c6:af:3f:18:5b:a7:29:32:a8:87:
                    a4:07:23:7d:f8:06:d3:48:37:95:b7:9e:d6:a6:54:
                    23:f2:40:42:01:88:e8:6f:77:a2:80:ff:c6:e5:bb:
                    00:d5:7a:8e:de:60:93:71:43:e1:01:2a:6c:b5:f4:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7E:CB:CF:98:41:99:7F:30:05:0E:58:E4:C5:8B:5E:70:73:9C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e7ec95d9-dc78-3fcb-9fba-4b75ba048516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.241.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:cb:35:5c:e2:12:f2:fd:45:68:31:48:db:ee:a6:7a:2f:
         ab:b8:0f:2d:7e:21:ad:0f:96:14:3b:aa:d8:ee:55:4f:03:f0:
         6a:24:af:4b:3d:5e:7c:d0:9d:bd:10:84:ec:bf:c4:84:92:0e:
         ab:bb:5f:38:b7:b7:a6:39:9e:ba:f2:ab:ca:5a:24:6e:67:24:
         9e:4c:cd:b4:fa:a4:85:59:81:2b:e9:22:d1:4f:e5:e0:b2:20:
         a3:22:84:e6:ed:3e:1b:d1:52:fb:dd:3c:57:02:e9:67:07:21:
         f5:4f:16:81:1a:57:6f:0f:42:04:88:8f:e4:18:72:40:e7:2c:
         84:b9:9e:40:b7:85:b9:6d:5d:b9:6f:d1:b4:e2:8c:f9:2d:98:
         69:90:79:20:89:74:cc:97:14:87:f2:11:92:57:03:a8:f5:f2:
         b8:34:f9:db:e8:7a:44:58:ab:22:35:42:38:ec:98:9b:09:4c:
         88:1d:38:24:a3:11:ce:2c:f1:89:af:45:86:1f:61:b5:aa:26:
         98:6c:7f:13:f7:15:76:02:dd:a2:0e:b3:47:b1:b1:11:a7:d3:
         38:e0:71:e9:74:1a:3f:84:3a:0a:13:e6:72:fc:a2:ef:6f:95:
         13:20:77:84:c4:cf:e5:d6:57:39:d7:01:72:e4:db:7a:a4:62:
         ab:2a:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:52 2025 by rpki-client