Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
File:                     0917c39d-467b-37b1-b692-3a38d4b29e0d.roa (raw, json)
Hash identifier:          /6WMCJoLsHs2swE9hulo+99DXFD6SiDM65b7/wplhwI=
Subject key identifier:   1B:5E:09:3A:B5:48:E3:A2:18:49:76:96:2B:3C:1D:6C:D6:42:0E:FA
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858486C2B0F9CC849E7287C222C80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        207.202.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:0f:9c:c8:49:e7:28:7c:22:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=a2406baf-ebe2-4695-ad42-2c6fe3bb1bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:13:ea:25:fb:ff:81:28:ca:09:c0:7a:ba:
                    54:9e:52:51:5f:33:0a:e8:1e:3c:8c:79:c3:02:15:
                    1d:fd:a0:45:c4:b3:9a:6f:82:bd:95:22:cc:7a:ae:
                    e8:67:3c:fc:75:71:c2:ab:e7:4e:cb:0a:46:17:58:
                    5e:a9:b6:3d:14:4b:a2:e1:43:0b:9c:7e:de:57:67:
                    ad:76:3d:d1:bc:f9:81:c0:82:69:08:14:4c:03:0e:
                    03:ed:75:6c:db:10:a1:65:7a:31:fd:1d:1a:8b:a2:
                    bf:63:ab:d5:94:1f:a6:46:a3:bc:bf:ab:f1:37:ee:
                    95:ea:39:b4:9e:92:4b:8c:66:e2:a8:d0:3a:47:98:
                    17:8b:c6:6c:48:04:2f:e4:da:e8:80:01:96:e0:8c:
                    8d:6f:ec:47:1b:30:88:e6:31:8c:3a:27:3b:65:31:
                    56:e3:a4:77:63:8b:ff:cb:2f:7d:f9:aa:5c:91:4e:
                    62:08:82:e9:e0:d1:35:79:23:6e:4d:4a:81:e9:aa:
                    88:9c:d2:c6:ed:3d:8f:bd:ea:c9:f6:f9:80:cc:e8:
                    23:b2:84:d5:59:75:85:da:fc:f3:2c:7b:21:41:a0:
                    25:84:08:05:66:e9:7c:a7:53:23:44:f5:f4:7d:4a:
                    6a:af:5c:be:1c:dd:97:29:29:2c:b5:f7:4b:a4:f3:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:09:3A:B5:48:E3:A2:18:49:76:96:2B:3C:1D:6C:D6:42:0E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:38:8e:31:08:71:ee:97:7b:f0:d2:6d:bc:23:8f:71:81:
         b7:b3:93:97:c8:64:a5:b5:a9:34:f7:15:61:e7:01:01:02:0b:
         1f:ed:9f:9d:33:e2:91:01:5a:c1:a6:16:04:1d:26:77:ee:75:
         d7:b4:94:69:e1:f0:b9:4a:1c:41:77:da:45:98:32:8b:32:9e:
         4e:8c:fb:f1:31:4e:14:5c:cf:6e:4b:58:b6:a3:9d:54:34:66:
         bf:75:5f:c4:e6:c8:c6:b7:73:81:53:7d:2d:07:b3:6c:79:50:
         7a:fb:75:c1:77:8a:9a:83:fa:6f:0c:ff:3e:19:c4:04:bd:4c:
         cc:dd:50:61:87:26:2e:60:fb:8a:45:2b:b4:e0:3d:a1:97:8b:
         c6:fb:54:f0:22:8d:03:ec:88:23:fe:87:38:35:9a:af:94:8a:
         de:2e:78:5d:49:1a:3b:3c:0c:ae:83:fb:9e:59:f2:35:1d:37:
         3d:c8:32:19:91:1d:05:16:43:a6:53:62:d5:60:97:eb:80:ab:
         9e:d0:2e:12:c3:a5:4d:e2:0e:5b:e1:90:a6:da:d8:aa:dd:4b:
         59:22:d1:4d:ad:9b:cc:cf:e9:0a:33:ac:e2:1d:c0:1c:7a:c2:
         6d:57:73:67:f6:51:e2:fc:2f:32:50:6d:ee:ee:c7:15:a8:9c:
         ce:c6:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:52 2025 by rpki-client