Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fe86e4f2-4e49-3c1f-8f7e-4347490ad2d2.roa
File:                     fe86e4f2-4e49-3c1f-8f7e-4347490ad2d2.roa (raw, json)
Hash identifier:          pbXCYc9Lq1he+CJhMWJ8KWfdGc7dI8Y+gkkNWCpy++0=
Subject key identifier:   7B:7D:78:F8:21:14:84:02:89:2B:E8:4E:D7:90:53:84:DD:71:50:89
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D43BB59085BD3E17BD40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fe86e4f2-4e49-3c1f-8f7e-4347490ad2d2.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        172.111.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d4:3b:b5:90:85:bd:3e:17:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=47a827ee-7768-44b5-927d-8dcc1d9c0561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:a7:99:71:14:76:6f:6b:96:4f:29:3d:47:
                    5f:e1:f4:09:ce:26:68:35:1e:07:cc:0a:df:e4:95:
                    5e:61:0f:06:84:04:d9:17:c9:e9:b5:dc:69:6b:5a:
                    61:82:d1:26:60:2c:72:9f:d8:56:21:8d:84:aa:5e:
                    dc:3f:bc:ae:b7:9e:d3:1d:2c:58:e2:9b:14:0a:92:
                    4d:b3:66:fe:d6:13:19:07:72:a6:f6:fe:dd:79:59:
                    b2:87:1e:ec:75:ac:9a:34:35:87:78:db:7b:0e:d8:
                    a5:7f:8d:a1:8b:10:ca:01:c7:63:fa:4f:e8:99:25:
                    1d:ed:73:38:0e:2d:a2:0a:f8:70:21:cd:7e:8b:17:
                    23:f8:53:e3:13:39:56:51:5c:94:da:1e:a3:3d:23:
                    03:78:eb:9e:67:7c:e9:58:41:8c:d4:cb:6e:5c:14:
                    6d:59:f9:72:fd:50:34:e4:57:87:00:f5:09:f5:90:
                    36:9e:30:d5:ac:14:3f:13:32:58:21:19:55:11:c9:
                    73:bb:dc:8a:4a:d9:0d:fc:56:c2:92:fc:9f:ce:ff:
                    51:e1:f9:d8:ec:84:f5:ab:30:3d:1d:86:30:c7:1a:
                    28:6b:66:19:b9:89:e0:73:39:ce:b6:02:27:5d:bf:
                    0f:13:a3:fb:fc:0f:bc:54:9a:e1:ce:2c:e4:55:1a:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:78:F8:21:14:84:02:89:2B:E8:4E:D7:90:53:84:DD:71:50:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fe86e4f2-4e49-3c1f-8f7e-4347490ad2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:93:57:57:d0:96:f6:f1:20:b5:fb:e1:99:cd:e1:96:35:3b:
         dc:26:85:13:cb:4f:c0:e5:40:08:cb:cb:2f:bf:17:0f:cc:c4:
         c8:c8:c3:99:fc:7b:ee:c1:88:df:a0:cf:bc:39:9d:e9:24:0b:
         e2:2a:9a:d3:68:3e:31:56:48:4c:c4:40:e5:15:b1:69:26:62:
         36:ca:a2:1b:ec:66:ff:56:89:47:67:27:f3:89:f4:c9:ed:5b:
         ed:6c:e7:a5:b0:40:9f:2a:ad:e1:90:6c:a3:76:ed:7d:fa:2c:
         48:a8:b9:1b:8a:80:78:76:fc:86:7e:45:30:f9:51:d9:d8:fc:
         39:be:bd:56:cb:62:e0:54:e6:e3:7a:93:0a:ad:6e:48:df:dc:
         aa:a7:95:2e:ef:b7:3b:da:d0:a6:0c:56:83:e9:db:53:37:02:
         95:3b:e7:03:97:3a:0f:3f:2f:32:ac:2d:2b:08:c0:d5:11:e5:
         3a:71:01:3e:8d:e2:95:16:b3:9a:c8:ee:1a:ef:da:22:76:73:
         48:ff:ab:50:f8:4b:e3:15:82:8a:c6:39:ea:ef:8e:4a:b8:09:
         0e:8f:79:bb:f3:b7:55:b0:ba:34:df:c8:6e:85:83:88:ca:69:
         fe:e9:8f:c9:1d:9a:e1:b4:48:7f:99:95:32:ff:de:a8:9b:6f:
         f2:64:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:30 2025 by rpki-client