Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f074346b-bbec-39bd-b50b-eccbb455f6f1.roa
File:                     f074346b-bbec-39bd-b50b-eccbb455f6f1.roa (raw, json)
Hash identifier:          1TfsBGdP0NEHosLT36XpKIborl9sXF4BvLfsVo6WJ2Q=
Subject key identifier:   9E:BA:6A:5C:DF:72:60:37:22:97:C0:FF:4C:29:82:AF:C8:43:40:32
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D89F7F4275547FAC6F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f074346b-bbec-39bd-b50b-eccbb455f6f1.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        151.101.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d8:9f:7f:42:75:54:7f:ac:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=dd690efc-4346-4149-a315-c5f01971d4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:09:e9:a7:fc:e1:9d:e3:85:5a:90:1e:44:
                    33:ad:d1:a4:04:a9:97:8f:c0:fa:37:ec:99:54:d5:
                    6a:71:36:dc:21:22:53:0a:52:92:dd:e2:a4:fa:59:
                    98:e0:20:9b:03:02:de:40:7c:ba:13:2f:d0:8d:d5:
                    2c:d5:8c:1e:09:b5:92:15:fb:d4:5c:a4:8e:5f:90:
                    0c:fa:f7:9a:64:f0:66:21:a2:2c:65:22:7f:6d:56:
                    01:11:3e:09:88:12:ab:15:3e:2a:e4:a0:39:40:66:
                    bb:95:e1:ec:6d:dd:c8:56:59:0d:8d:e1:49:bf:85:
                    b7:ad:b5:67:ad:a8:9a:e6:8f:e0:a4:09:41:aa:e8:
                    16:49:27:f7:42:9a:ff:52:8a:00:01:bb:93:5e:f0:
                    90:83:ac:74:6b:ad:fa:c4:73:25:d3:c4:4b:ba:6a:
                    62:12:bf:e0:35:e0:80:21:09:72:5b:2d:80:34:61:
                    5d:41:06:47:97:09:8d:a3:26:1b:2b:8f:1c:67:bf:
                    a7:ec:bd:38:92:a6:f5:e8:91:24:8c:18:00:55:89:
                    ee:3b:85:5b:b1:06:ec:ef:8c:de:2f:49:bc:e0:84:
                    7b:14:86:2e:1c:43:43:45:3c:4a:81:76:24:66:a9:
                    a5:a8:6d:ec:22:53:0b:29:af:e2:45:b0:bd:89:dd:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:6A:5C:DF:72:60:37:22:97:C0:FF:4C:29:82:AF:C8:43:40:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f074346b-bbec-39bd-b50b-eccbb455f6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:f5:3f:f5:81:1e:20:6a:5b:1f:0d:09:a8:67:12:cf:9f:
         14:8b:95:81:3c:87:d9:a3:76:12:07:21:84:1c:7a:2b:ae:b2:
         85:66:8f:7d:ea:81:02:25:33:7c:0b:24:23:75:04:e6:9b:5e:
         0e:7d:16:af:dc:1a:27:25:ef:5d:3d:3d:7a:8f:21:ba:9f:0d:
         92:29:4c:ea:2e:ca:89:d5:7a:a0:e8:6c:3b:1e:97:22:d5:a8:
         16:c3:d7:3a:86:50:36:92:9f:41:3c:80:d5:74:fe:3e:22:98:
         0b:e5:01:3e:90:27:b4:c1:dc:61:84:b4:e8:14:cb:7d:80:f8:
         dd:25:fd:a0:5f:54:83:14:49:d5:28:05:e2:99:7e:74:26:aa:
         e1:71:de:57:6a:09:7b:b5:d1:b3:59:01:f9:0c:67:d3:fe:78:
         95:53:c1:e9:c8:02:f2:ec:58:46:ed:64:42:30:54:3b:98:48:
         2b:a4:66:fc:dc:01:2a:2f:51:a0:e1:32:59:4b:84:76:31:7a:
         6c:37:46:e0:22:97:d4:fc:c8:f4:c4:6a:e4:2c:f3:54:15:47:
         ca:42:ba:b3:90:cc:c8:b3:11:c8:bc:ec:96:79:e4:23:58:39:
         96:a2:7c:08:fb:a6:07:8f:0f:34:d1:2b:08:90:a4:0b:07:6b:
         23:81:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:11 2025 by rpki-client