Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa
File:                     ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa (raw, json)
Hash identifier:          251luH5095h8QAXFVb5mk7kSAb+5uMzYWzh3XpCNPeY=
Subject key identifier:   DC:0C:9E:17:AC:7A:61:50:C5:49:78:79:A6:17:55:89:C7:A3:06:DF
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F432858484C1012A499AD9C8755CBC080
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     26768
IP address blocks:        140.235.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:12:a4:99:ad:9c:87:55:cb:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=3dbe2914-60bc-4f33-9948-ede62e5c550d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:ff:df:69:3d:a7:6e:16:a8:ef:92:bc:de:
                    5a:60:71:4c:ea:51:c3:8f:87:b9:bb:7b:c9:53:6d:
                    2a:e2:1b:8c:67:9b:e1:cb:03:7b:a8:60:c8:7b:49:
                    ba:4a:39:d7:59:96:d8:fd:c6:7d:6f:cf:23:eb:ee:
                    5b:36:a3:5e:65:91:96:ef:e0:f6:56:81:5d:33:c2:
                    c3:00:34:ea:d6:15:7a:7e:83:94:50:2c:dc:cc:b4:
                    c1:8f:91:58:10:dc:ac:4e:d0:d3:c5:09:7b:e0:03:
                    e3:f0:a0:97:65:bd:87:40:c0:c4:36:99:c1:8f:8c:
                    2a:0c:ab:b3:36:90:d9:b6:fb:5d:18:5e:c5:e1:03:
                    4c:f6:28:f0:95:fe:c4:97:43:c1:17:4f:c8:db:bc:
                    a0:b2:42:36:87:2b:4b:c6:34:75:ba:8f:e8:c2:b0:
                    db:be:f6:18:71:54:0f:98:93:4b:c7:db:0c:39:0b:
                    75:50:b1:0f:f5:f1:85:c8:dc:fa:82:c8:c9:49:e5:
                    fa:76:e3:67:20:dc:0d:4f:c1:88:d1:bb:a4:f8:b1:
                    18:62:40:53:de:5f:9f:78:fb:87:b8:6f:52:b3:86:
                    c5:19:47:64:fd:51:1b:2e:8b:88:9b:8f:89:39:08:
                    7e:01:b2:5a:ef:b6:0f:1c:df:57:c0:d1:62:38:a8:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:9E:17:AC:7A:61:50:C5:49:78:79:A6:17:55:89:C7:A3:06:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:8b:7c:0b:9a:b2:7e:b8:8a:40:32:f0:1e:16:cf:dc:9d:
         e9:9b:ba:f8:9c:74:18:d1:72:ff:74:19:3d:8c:93:56:ef:d9:
         36:14:0b:58:dd:19:79:37:d0:fb:2f:1b:52:84:2b:77:a0:18:
         d1:02:db:17:a1:8a:53:b3:60:b1:76:ba:48:44:23:85:8c:b0:
         d4:39:f9:79:b5:8d:79:f5:bd:ca:5a:e8:b5:e9:73:c7:df:eb:
         7a:8b:e3:06:74:78:a2:bc:c9:08:ff:f7:8d:a3:4a:c3:4b:df:
         af:b5:bc:dc:31:9f:cc:1c:86:0c:26:46:60:50:20:98:25:c4:
         dd:e0:8b:b1:34:34:3e:ff:83:c9:3b:45:03:e3:80:5c:70:14:
         5a:2c:45:0f:25:b4:30:6f:3d:d0:64:9c:a4:50:1c:50:28:40:
         59:b2:75:90:bd:be:7b:83:33:c2:13:82:11:20:c1:5a:c2:69:
         0a:c3:26:e5:12:f4:fb:62:e1:93:3c:03:6f:14:f4:f7:b1:bf:
         54:2e:b2:35:36:33:53:23:91:30:cd:8f:08:3d:73:b2:46:db:
         4c:b9:da:81:94:c9:4b:9a:0e:73:60:44:d9:ae:20:5b:98:35:
         08:6f:4b:aa:78:c2:42:9f:6f:aa:1b:01:ad:9e:e9:53:ca:4c:
         c2:39:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:24:58 2025 by rpki-client