Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fbe6cb63-f0f1-3a55-a787-fa949974f73a.roa
File:                     fbe6cb63-f0f1-3a55-a787-fa949974f73a.roa (raw, json)
Hash identifier:          aoYJKPOyP6PlJk/319/KDBA1BdqK1cPYIcarF8n/Rgw=
Subject key identifier:   61:72:9A:DD:FC:F5:40:D7:A2:B9:7D:37:2F:40:7E:10:A9:BF:99:D2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D835C62BB36DBD40A440
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fbe6cb63-f0f1-3a55-a787-fa949974f73a.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        151.101.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d8:35:c6:2b:b3:6d:bd:40:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=2ee9bdbe-2354-4802-871e-2b345ac567ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:66:4a:13:d9:6c:0f:d3:b9:a5:65:eb:55:
                    8e:ed:2f:74:c3:c7:e2:a8:96:9d:53:64:d1:71:34:
                    36:2c:d9:f9:68:4a:e3:de:67:dd:5a:cb:b8:37:b3:
                    5b:e8:47:96:59:1a:dd:69:1e:18:8e:39:d6:0b:1f:
                    7e:62:8b:84:9a:f9:f2:2e:67:7d:74:e6:b3:5c:f9:
                    41:61:ca:6f:d3:c7:3b:dc:c8:bc:65:9a:e9:88:46:
                    21:38:9a:ea:44:15:61:f0:57:51:ee:e3:2a:fc:6d:
                    7a:6c:64:42:5c:3e:09:70:37:30:9b:c6:79:f2:93:
                    fe:52:57:08:e6:e8:54:8c:cf:1d:6c:28:8a:82:c2:
                    fc:1e:30:5f:2f:18:3d:11:ff:25:9b:ae:5a:75:2a:
                    61:f1:37:7d:67:da:ba:fa:05:c4:00:72:ef:ef:ab:
                    03:b7:f7:07:2d:87:fa:16:ff:5b:c0:57:80:18:19:
                    a9:f5:20:98:4f:53:cf:33:c9:b3:0e:e5:a5:93:fa:
                    a2:9f:43:5b:b6:2a:d9:41:26:f8:3d:62:2d:d7:70:
                    cd:fa:da:0d:e6:8f:76:11:7b:c4:9e:ff:e6:65:b3:
                    95:10:f7:d7:14:ac:bf:73:fe:8f:dc:1a:53:a1:9c:
                    f5:ba:55:d1:3f:1c:d3:65:65:b9:83:4a:62:8d:62:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:72:9A:DD:FC:F5:40:D7:A2:B9:7D:37:2F:40:7E:10:A9:BF:99:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fbe6cb63-f0f1-3a55-a787-fa949974f73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:1c:d5:de:14:61:67:6c:aa:a9:d8:03:ec:e6:d5:bc:4f:
         10:a2:4a:29:dc:b7:3a:e2:e4:7b:64:55:4f:2a:ba:54:ab:84:
         9b:e0:d5:bc:b7:ca:32:a1:ee:92:65:1b:e0:9a:9e:1e:75:81:
         b5:7d:61:26:bc:b6:0d:cc:58:e2:73:27:fd:c5:9a:b0:6a:f3:
         32:dc:27:d5:ab:29:14:3c:fd:a7:88:9e:f5:20:98:dc:96:a2:
         d3:4e:31:08:0a:16:55:dd:2a:90:47:48:10:ae:b9:c4:25:99:
         c5:ee:86:24:c2:6d:e7:46:ea:83:f0:92:d5:cc:59:a4:7a:84:
         86:aa:49:79:a6:5d:67:43:f1:09:2c:32:9f:95:f5:f2:f0:11:
         d5:fc:c9:9b:5a:dd:5c:53:56:82:3d:51:4f:4f:8c:78:36:1c:
         83:49:6a:14:b4:d4:70:d7:9b:e9:57:31:e1:66:db:bb:06:b4:
         23:d2:57:fa:74:03:52:d8:24:9b:96:3f:3f:76:1a:69:65:e7:
         cd:ad:7b:f2:ef:e8:a7:c6:48:ce:1e:e8:d6:a4:9d:f8:f4:fc:
         ea:b6:e6:9f:e4:6c:dc:39:bd:7d:70:e5:e5:5e:46:6d:32:62:
         9d:9a:fb:11:97:6b:bc:26:6f:90:ab:fe:79:c6:33:c1:08:aa:
         af:bb:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:35 2025 by rpki-client