Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa
File:                     f4268c2a-59de-3a1d-b2ec-3952e6424669.roa (raw, json)
Hash identifier:          ZhboTiYCxNR5ri1RgBC2pEH4LMFA1hshKYPpFYH9Lic=
Subject key identifier:   EC:CF:18:58:A7:5D:D0:CE:64:35:95:2E:10:1D:3C:65:15:67:8F:AD
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F432858490E16CB98C3F939B818617200
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     398343
IP address blocks:        165.140.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:cb:98:c3:f9:39:b8:18:61:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=5a0c6d56-8234-4fb4-882f-437899681735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:c2:7a:2b:37:94:da:bf:90:cb:46:dc:c8:
                    84:1c:cf:06:f2:8f:91:3a:b0:74:a6:1f:6c:60:7d:
                    8a:00:74:eb:3f:07:bc:12:fd:2c:b0:20:95:83:ad:
                    71:f7:e4:1d:e8:ed:c2:72:1c:7b:9b:56:fe:4f:45:
                    31:b2:14:64:4f:c5:bd:3d:75:2b:81:d4:50:98:76:
                    94:e1:1e:e7:bc:fa:4f:09:4f:7d:9a:e4:e1:b0:8c:
                    cd:3e:2f:06:75:23:90:f3:1d:0b:a2:14:fe:be:dd:
                    d2:be:fc:14:d6:5c:e9:04:c2:b5:fc:5c:7f:69:7b:
                    dc:36:0a:7f:ae:30:da:97:ab:8c:ce:a2:f0:9d:ad:
                    b5:9c:d0:83:af:9d:b0:c4:48:24:e6:2d:9a:56:73:
                    06:22:51:a3:8d:de:ea:c0:0c:b3:28:20:33:e3:19:
                    d3:f9:f8:77:13:e8:e1:51:84:33:a1:cd:87:6b:be:
                    a1:12:b1:87:f7:c1:75:d0:07:fc:d9:05:17:d7:88:
                    da:b6:04:d1:22:d5:57:da:2b:c5:9f:22:c9:a6:af:
                    cc:bd:2c:29:c3:ba:b7:7d:b1:dc:9c:61:46:33:78:
                    cc:31:50:02:56:d3:3e:0a:c8:b7:b3:21:ba:43:5f:
                    ae:c5:25:99:b3:19:60:40:3b:0e:6d:28:fa:70:20:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:18:58:A7:5D:D0:CE:64:35:95:2E:10:1D:3C:65:15:67:8F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:58:f7:c2:dd:c8:7b:be:07:f8:da:3e:8a:14:31:22:01:
         fb:45:60:e9:76:08:c3:b0:c4:0c:a1:5f:bb:97:93:56:1e:20:
         16:cc:f8:53:70:f7:9f:e4:cb:f0:af:a3:18:4c:bb:cc:bc:d0:
         d8:a4:46:82:a6:58:bd:54:4d:16:9c:94:3d:cd:3e:13:63:ff:
         4d:9a:4c:ab:b7:f2:4e:5d:07:82:4a:d7:f1:0b:2a:33:87:f2:
         a3:22:8a:a0:0d:e8:5a:09:4c:e8:95:2b:d2:09:93:8e:af:e7:
         94:9a:a8:c9:b6:fd:24:42:91:44:65:1a:1c:e9:ae:07:f0:01:
         86:ff:85:6c:78:fc:b2:51:d1:a9:53:63:c5:b9:b2:8f:f8:e0:
         d1:81:63:68:d2:be:15:85:3f:db:f0:66:a4:a5:77:c5:9d:da:
         cf:e1:f0:9d:8c:63:0f:5e:2f:c4:b4:12:c0:fb:64:b3:c1:be:
         a1:94:dd:4a:fa:05:78:46:1e:46:ff:91:3c:9a:71:a7:df:b2:
         30:f0:f7:7e:67:a4:5b:08:09:8f:9b:db:03:73:0f:13:41:13:
         cf:4d:d8:30:3b:b0:03:9d:de:b2:a7:3e:b8:72:eb:6d:68:a7:
         e5:1e:d8:60:f9:79:9b:a5:25:26:78:01:67:59:24:ee:fb:2e:
         e9:08:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:26 2025 by rpki-client