Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa
File:                     05028105-0402-3388-9082-81e1412365e8.roa (raw, json)
Hash identifier:          qTkpizGhm+pJZ3C/AsK0EvrosK6Rzfz7QjJDXHKodGA=
Subject key identifier:   83:6C:C1:B0:40:17:53:BD:8B:54:9D:5C:67:51:D0:58:F2:E2:8F:A4
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584806450275D02A525DBDEAF700
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     6498
IP address blocks:        75.78.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:02:75:d0:2a:52:5d:bd:ea:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=37d5f015-aa22-4088-bbc1-d39229c65a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:35:03:ca:7e:dd:21:7e:6a:2e:53:6f:40:
                    76:c6:fb:fb:24:b4:f1:c6:47:85:51:28:9c:1d:66:
                    43:0e:02:b5:26:aa:57:2c:ef:95:26:20:64:2e:50:
                    36:e8:a6:fe:89:0c:ee:43:d5:e5:48:d2:78:aa:c2:
                    e6:73:b8:67:a7:0f:f1:51:b7:e3:af:55:fd:24:77:
                    94:0b:49:48:52:63:01:4c:56:c1:8c:af:6b:b7:c3:
                    6b:03:08:bf:d4:71:c8:84:4d:44:e5:05:e4:bc:2a:
                    18:ff:4c:da:10:d6:42:1e:fa:c6:90:5e:33:7a:9c:
                    a4:b5:52:b1:bd:ef:16:84:7a:25:a1:5d:f5:fc:e1:
                    7a:e9:a1:f4:0e:e1:b3:af:53:70:82:a2:6d:86:03:
                    28:fc:eb:77:a5:ed:7f:02:cd:e1:ef:a9:dd:c5:9d:
                    95:34:49:37:e9:11:a4:fe:5a:00:89:11:58:f6:0b:
                    b2:0d:ff:b1:89:dc:93:42:ab:73:57:23:ce:82:89:
                    af:8c:6f:4e:70:5b:ed:b2:30:88:96:ce:ce:ba:14:
                    37:d3:6f:d3:c0:f1:61:fc:d8:5f:15:44:12:44:55:
                    32:e5:cd:62:1d:80:bd:42:33:91:f7:f5:37:ec:5f:
                    66:5e:37:ac:38:a0:84:0f:d3:a8:97:b4:bc:55:53:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6C:C1:B0:40:17:53:BD:8B:54:9D:5C:67:51:D0:58:F2:E2:8F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:94:32:5b:4c:60:6d:4c:34:b7:1f:cc:55:ec:5b:58:5f:fb:
         f1:c0:98:a5:b3:34:6d:6a:79:f6:3d:e0:ca:3a:0a:11:48:32:
         b5:40:15:ae:2f:49:9d:29:e1:e1:bc:a9:3e:86:9e:df:3c:17:
         74:4a:c4:a1:df:25:f7:d9:c5:3a:34:1b:49:4d:e6:71:d9:cf:
         14:a8:fa:c1:af:2e:d3:8a:45:ae:2b:ba:8f:6b:6b:5f:af:11:
         81:37:6c:58:e3:33:f1:50:8d:ec:86:18:72:c7:ce:3a:56:0c:
         99:04:64:7e:08:3c:d3:6b:b8:93:94:96:ed:0e:ef:4e:1c:73:
         a8:a6:84:67:af:69:29:0d:f2:a4:d9:3e:d4:b9:b9:7d:0c:bf:
         fc:d6:a0:4c:4d:b0:fb:7a:38:b7:12:34:5d:5f:6b:55:2d:3a:
         03:63:7b:32:81:f4:9c:72:26:31:91:55:82:d3:b5:b4:07:e6:
         2c:ea:60:68:5a:4b:ba:98:90:1b:6e:af:45:9b:d2:21:f2:a2:
         ac:be:34:26:42:18:ea:ba:9e:db:8b:ce:b8:8c:8b:44:6f:63:
         8a:e5:0b:b0:61:3b:b7:25:74:6e:ce:c2:ec:aa:b2:e8:ea:9c:
         ed:31:78:4a:ae:05:9e:1a:0b:cf:57:12:c4:78:df:88:b5:64:
         f9:69:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:34 2025 by rpki-client