Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa
File:                     f62217ef-de08-3ce5-adaa-1740b66c2023.roa (raw, json)
Hash identifier:          aSZGtCGzsbTkb85c4vsUdAsZe62QSu+HmntHY2pKpJ4=
Subject key identifier:   FE:60:41:AD:35:44:D3:B4:8F:E2:F8:7A:F3:CC:E1:E0:EE:69:FD:F3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C8CBD2F45446CA22DCC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.239.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c8:cb:d2:f4:54:46:ca:22:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=5a571bd6-b326-4ec6-bd59-686ae7ceaa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:f7:62:bf:4d:0d:4e:e3:bb:6a:92:ba:a6:
                    c6:c4:1b:74:4d:89:4f:85:69:d3:15:40:ed:23:94:
                    cc:8d:4e:4e:ef:a0:e8:73:61:41:f6:30:bd:b9:79:
                    b9:ea:92:3c:68:5b:13:4b:2d:78:c0:d7:9e:91:fb:
                    72:0b:8a:2d:7f:2d:60:d5:6c:9c:18:f8:bc:8e:db:
                    b2:ac:a0:60:e6:0d:a9:04:7c:96:0a:9e:a8:92:8b:
                    c2:ad:c9:82:f0:aa:cf:c5:6c:cd:67:0c:90:b9:d2:
                    9d:bf:a2:d4:fe:76:f2:e6:29:6f:19:f0:92:bd:34:
                    1b:3d:40:bc:8e:f6:0f:fd:27:5d:52:c5:03:ef:26:
                    f5:43:fa:29:05:9f:e8:8c:df:99:7f:8a:ec:89:90:
                    ce:c5:5d:30:8d:5c:e7:1e:8a:7f:02:9a:12:65:f9:
                    c6:33:62:58:54:bf:73:1f:8f:5a:8b:4d:38:e4:e7:
                    cd:12:cd:f0:b5:de:94:00:af:72:cc:68:b3:e6:53:
                    15:5a:6d:a8:9d:ed:a8:a6:30:6a:b8:e9:d9:26:97:
                    96:ca:2b:7b:0b:ed:78:02:c3:21:70:1a:79:4a:19:
                    2f:8b:fb:29:be:ed:94:b0:98:56:25:af:72:e0:28:
                    ea:6e:96:2d:ef:bd:be:d2:83:b3:7d:e4:b8:20:c6:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:41:AD:35:44:D3:B4:8F:E2:F8:7A:F3:CC:E1:E0:EE:69:FD:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.239.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:cf:8e:ec:fa:80:8e:65:5f:f5:35:04:dd:01:59:56:e2:20:
         7f:eb:f0:3e:46:c9:86:d5:01:74:d0:88:1e:7e:45:c6:df:9d:
         d2:dc:03:34:ff:f6:81:e2:6a:40:e9:81:dd:13:de:79:0e:87:
         c9:16:fb:5a:e8:4c:30:29:19:7c:1c:a9:76:55:09:84:56:8e:
         30:33:d7:45:15:90:89:3e:87:58:4e:76:31:13:ee:8c:52:f0:
         bd:a0:2a:02:de:28:e2:30:41:f1:9a:e4:d3:78:97:13:78:cb:
         10:0a:12:e8:8c:81:f7:68:b7:fc:fa:b1:51:27:d8:a3:8a:3b:
         33:bb:15:7c:b2:a4:3c:a5:cc:3d:c3:5b:9c:91:0c:e2:58:6d:
         fd:cc:a9:3f:00:32:26:df:fe:dd:00:1f:b1:10:b8:76:75:51:
         54:b8:07:12:54:38:86:9d:88:96:4c:a8:52:97:07:19:69:20:
         fb:77:ca:8c:dd:e0:13:83:0a:78:18:83:96:17:03:c4:6c:c0:
         85:99:cf:65:dc:84:d5:b4:1d:78:1a:aa:40:34:d9:75:94:76:
         e0:e2:e7:ee:19:fc:5c:30:07:e4:f4:c2:6c:ca:1f:75:1f:f9:
         53:ce:2a:86:fc:17:e8:52:8e:cc:de:c9:74:02:b3:d2:43:e6:
         fd:70:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:21 2025 by rpki-client