Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/4b40ce5c-4b0e-3d21-8861-06ce8eec567a.roa
File:                     4b40ce5c-4b0e-3d21-8861-06ce8eec567a.roa (raw, json)
Hash identifier:          XvH+yB9IzZdRUaWqf2owFH58WxDW8FzPbHw5mWd31M8=
Subject key identifier:   E8:FA:33:93:68:FD:F5:BD:63:5B:9F:77:8F:02:C0:F0:7E:CA:E9:F9
Certificate issuer:       /CN=8c51fc03-881b-4bb7-a40c-ed520fa129f7
Certificate serial:       010D0C9F43285848784C80C0AA68A5290C330F00
Authority key identifier: 84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/4b40ce5c-4b0e-3d21-8861-06ce8eec567a.roa
Signing time:             Tue 07 Jan 2025 22:18:02 +0000
ROA not before:           Tue 07 Jan 2025 22:18:02 +0000
ROA not after:            Mon 07 Apr 2025 21:18:02 +0000
asID:                     53356
IP address blocks:        140.235.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:4c:80:c0:aa:68:a5:29:0c:33:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c51fc03-881b-4bb7-a40c-ed520fa129f7
        Validity
            Not Before: Jan  7 22:18:02 2025 GMT
            Not After : Apr  7 21:18:02 2025 GMT
        Subject: CN=c91c9894-3127-4407-81b4-b0e77b300dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:dd:aa:c6:06:f4:0e:e4:0b:27:57:de:b7:
                    c2:90:5e:ca:5f:88:26:45:0e:27:f0:65:70:c5:18:
                    3d:62:f2:4c:4f:8a:d7:da:74:1b:7a:c1:e3:e2:e5:
                    49:ab:1a:e3:73:1c:7e:a5:4d:3f:eb:34:bd:cb:3f:
                    be:ec:92:3d:36:49:e3:c6:a0:13:81:ba:00:4a:1a:
                    3f:a2:7c:6c:f6:79:9b:e2:30:bd:74:12:74:25:af:
                    44:cb:22:7c:f9:22:e5:d7:5c:12:ac:45:a1:9f:2f:
                    1c:1a:db:a5:a5:54:21:b3:c5:3a:f6:ec:7d:51:4c:
                    ec:f0:ef:72:7d:b4:66:89:db:2e:58:06:bc:2e:6f:
                    23:c9:b0:9d:4f:c3:a2:91:c5:07:06:d3:84:4a:1b:
                    85:e3:91:d9:57:cd:d2:d6:e5:04:ed:f9:23:e6:3b:
                    4f:56:f8:37:06:04:b4:0c:50:1e:8f:8c:14:86:df:
                    38:08:df:82:a9:04:46:1c:e1:42:e3:09:e9:da:cf:
                    65:d6:bf:cc:5e:d6:bd:89:c7:e6:b8:93:ef:6d:6e:
                    c0:5a:23:7d:d5:dd:6b:4d:20:c2:c1:c2:3e:3b:70:
                    89:cb:88:b4:60:cc:b8:4d:5c:4a:d0:e5:d1:8f:1a:
                    41:3e:c2:01:bf:04:6c:bf:6f:8c:75:aa:05:fc:d3:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FA:33:93:68:FD:F5:BD:63:5B:9F:77:8F:02:C0:F0:7E:CA:E9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/4b40ce5c-4b0e-3d21-8861-06ce8eec567a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.crl

            X509v3 Authority Key Identifier:
                keyid:84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:4e:ba:12:d6:1a:c5:9f:65:be:c8:eb:d3:78:61:35:79:
         c3:e2:3e:1f:68:6c:63:3e:78:8e:4c:75:ec:f1:64:4d:90:8b:
         50:46:d4:13:3b:b3:b0:e3:17:23:63:b6:17:e9:b4:0f:29:ab:
         33:00:52:92:47:56:03:bd:a2:0a:de:d9:b2:2d:7a:ed:71:05:
         96:07:53:37:72:92:8f:79:59:74:b8:b7:8b:9b:b5:b2:2d:07:
         b9:5b:1c:c2:76:f1:be:9c:36:41:b3:f3:cb:a2:05:21:04:19:
         b1:ea:39:ab:70:ab:5a:0a:92:4e:41:16:36:81:df:c6:e2:0a:
         0c:17:c1:74:f4:d6:6a:0c:67:e3:9d:1d:c5:67:fe:ed:9c:9e:
         58:e5:cf:25:54:af:20:3a:91:5a:a2:33:9f:46:83:f4:89:c9:
         d3:f2:88:99:2a:4c:1d:7a:05:07:7a:ff:cb:10:31:a9:ea:3b:
         00:a4:42:55:cb:e3:2c:cc:ff:75:d8:bb:94:41:f8:d6:de:28:
         b1:6c:e2:93:a7:c3:0f:e7:4e:55:7d:61:5c:d5:ee:78:2a:02:
         e5:22:a7:c7:5b:9a:b8:57:27:31:ab:8c:b6:98:f3:62:cb:1a:
         78:cc:2e:b8:4d:7d:73:1c:00:be:0b:aa:48:e1:97:78:0c:00:
         93:25:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:50 2025 by rpki-client