Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa
File:                     07f6cc41-1ed6-3718-a24e-2c2317175251.roa (raw, json)
Hash identifier:          xUMbK08pa9UUMKWCT6O8SL3YM72HQe6gRlVK4w5Rqbk=
Subject key identifier:   15:2B:24:5C:A9:08:8B:82:BB:30:84:85:7D:25:33:7C:D5:47:30:3D
Certificate issuer:       /CN=e84e88d1-804b-445f-9551-b2b8634de3c4
Certificate serial:       010D0C9F432858485E35B7A12F2DB307B8A29780
Authority key identifier: 73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     376
IP address blocks:        205.236.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b7:a1:2f:2d:b3:07:b8:a2:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84e88d1-804b-445f-9551-b2b8634de3c4
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=2d9bd45a-fb1b-4273-b040-9f916061fe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:49:bb:72:5b:ea:7f:07:c1:c3:a7:a3:bf:
                    88:72:22:1d:40:da:a1:c0:c4:53:69:cd:25:41:81:
                    b9:f1:48:c7:c8:f3:84:1a:64:61:bc:00:d9:55:2b:
                    c0:6f:da:00:82:ec:ae:cb:a0:35:6a:b4:48:cf:cb:
                    d2:18:d4:ba:ce:46:a5:dc:47:04:bc:02:41:bf:69:
                    71:f7:a0:b9:33:a3:1c:6e:e3:5a:a9:7b:e9:d4:81:
                    ac:2b:d1:55:b3:af:6a:f4:7a:15:87:4b:cc:36:bb:
                    81:1d:23:a5:4a:55:3b:f7:6e:72:aa:f4:0a:1e:b0:
                    09:94:6c:a2:b0:9d:91:3b:dc:01:d4:58:fd:04:46:
                    53:d8:49:7d:8f:5b:7b:35:7d:67:32:c3:6c:e0:bd:
                    fc:7a:d4:27:e4:68:69:2d:f8:10:84:cc:87:ab:a9:
                    08:ad:a4:cb:15:29:3b:42:9a:ba:0e:a2:33:91:76:
                    25:9b:1c:f6:87:41:67:1b:40:a4:af:06:50:25:9d:
                    36:4f:39:1a:16:da:ff:ae:df:17:53:dc:c5:9c:39:
                    16:4c:7e:c1:ed:5f:46:95:ef:46:f8:19:38:25:a3:
                    64:97:e0:51:82:9e:05:f2:e7:cf:8a:fc:32:c8:1a:
                    b3:fb:98:80:ac:95:db:3f:95:dd:56:af:aa:4e:5c:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:24:5C:A9:08:8B:82:BB:30:84:85:7D:25:33:7C:D5:47:30:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.crl

            X509v3 Authority Key Identifier:
                keyid:73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6a:15:07:7a:0d:42:36:90:55:9c:52:6f:1e:92:15:ae:c7:
         24:aa:fe:95:47:89:70:fe:1f:8a:47:7e:e7:30:db:f5:ec:02:
         d7:db:2f:77:93:70:63:dd:10:ac:88:83:0a:04:b6:a4:b1:ae:
         c1:41:11:2c:2b:0f:b1:2c:0b:fc:c5:63:9d:4c:57:c7:65:42:
         14:5b:2c:75:09:c0:80:98:a7:e1:75:f1:6f:6b:1e:c6:fe:44:
         32:0e:12:a2:34:95:63:98:68:2d:ee:a8:ef:a5:6f:7b:8e:9b:
         87:80:3e:c8:6d:ea:06:4f:8e:c0:69:71:6c:65:49:3a:82:33:
         c0:a2:26:b0:62:3c:ff:40:1b:6e:fd:01:c4:ee:c8:dc:ff:81:
         1a:90:ab:ad:40:ed:20:bb:83:e8:c8:e3:7c:9e:ad:ad:f8:04:
         95:c9:e5:9d:b2:ad:e4:e7:d8:9c:fc:90:55:f7:79:8f:99:03:
         68:88:20:3f:35:d0:63:e6:14:fe:69:69:f3:d1:57:82:ae:c4:
         f6:e6:65:f2:58:2c:69:b3:80:e8:27:0a:bc:2e:de:a9:1f:b8:
         2f:9a:b6:ea:44:3a:76:91:0c:e1:0a:5e:f3:f9:5b:af:c0:67:
         b3:82:96:c9:25:1a:8e:e5:ff:9d:e8:f1:c5:b6:f4:07:9a:82:
         79:d4:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:12:28 2025 by rpki-client