Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa
File:                     80e5ab84-a929-32f4-948d-aba406bd0ac0.roa (raw, json)
Hash identifier:          eMjyLvAKvqTR6nMoi2HoDSf56IVObLX6p5MZP8TdzcQ=
Subject key identifier:   78:B0:97:55:8B:0B:0B:26:AC:EF:B0:22:5E:B2:39:CC:36:E5:F2:33
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285849447CF5EC9EC6988CB7C3D480
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa
Signing time:             Sat 22 Mar 2025 01:40:34 +0000
ROA not before:           Sat 22 Mar 2025 01:40:34 +0000
ROA not after:            Fri 20 Jun 2025 01:40:34 +0000
asID:                     16509
IP address blocks:        107.151.224.0/21 maxlen: 21
                          107.151.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:7c:f5:ec:9e:c6:98:8c:b7:c3:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 22 01:40:34 2025 GMT
            Not After : Jun 20 01:40:34 2025 GMT
        Subject: CN=756a07a8-bc2c-452b-8f27-0d5b8c8b8f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:52:39:9c:bf:b5:37:15:d3:ff:54:9b:03:
                    77:d0:dc:e6:97:96:82:9b:12:54:05:1b:01:46:e2:
                    61:ba:eb:99:6f:8b:fb:5f:fe:da:9f:f7:00:cd:25:
                    18:b4:22:c4:14:d8:9a:5c:a3:ce:a6:e7:4f:ed:3d:
                    03:12:68:ce:30:9b:e1:b6:62:fc:64:aa:46:96:f9:
                    42:2d:07:3b:6f:38:a9:45:84:99:a5:5d:17:54:fd:
                    c9:d3:48:fd:b5:14:53:a0:b3:0d:cb:20:ea:dc:0f:
                    97:dc:41:ce:c1:f0:7b:6d:68:c6:1d:b3:f0:6b:ba:
                    38:2a:6e:60:04:9b:30:02:25:45:90:de:2e:6a:3f:
                    3c:66:6f:f8:f0:94:25:85:ce:d5:04:68:75:e3:ff:
                    15:33:f0:dd:87:20:17:4c:10:4f:e4:b6:17:10:67:
                    eb:29:a5:dd:99:23:6a:c8:e5:5b:a6:bb:bb:fb:37:
                    a4:b0:0a:cd:bb:ce:76:35:d1:0a:b3:88:0c:7e:82:
                    ef:0d:36:40:19:d2:e4:71:98:e7:73:ae:3c:aa:ec:
                    8d:07:d2:26:90:65:34:d9:b9:cc:fd:62:40:98:28:
                    b9:a2:b6:89:de:f1:a4:d1:7c:a1:98:66:68:de:7c:
                    34:5b:75:02:32:03:d4:a7:32:f5:94:d3:51:70:0f:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B0:97:55:8B:0B:0B:26:AC:EF:B0:22:5E:B2:39:CC:36:E5:F2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.224.0-107.151.233.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:3e:48:da:c1:c2:9d:f0:94:2e:23:18:43:51:e2:14:12:
         29:ab:be:7c:ff:29:a0:59:8f:c4:48:a6:c9:3b:54:6e:03:c3:
         c8:58:d8:48:b4:dc:46:98:53:b0:2a:73:d6:58:f0:46:e4:12:
         19:00:7c:08:f4:9c:f7:b0:b8:10:e6:62:09:a8:00:df:23:22:
         bf:df:40:1b:95:f5:2c:9c:49:7f:d6:ce:17:d3:65:2e:c7:13:
         64:bc:f2:c3:ff:b1:20:31:37:5a:aa:6f:ae:3d:cc:12:47:81:
         d9:ae:36:2d:2b:89:a5:14:5b:62:2a:a8:8f:4e:7b:2d:c9:d0:
         23:f7:7a:b5:03:40:b8:f4:d2:cc:49:0f:13:9b:86:4f:1e:1e:
         60:7b:ac:d5:fb:89:64:4d:0d:44:eb:36:75:96:80:ae:e3:a9:
         a5:0e:7f:4a:33:10:e7:c1:39:57:f8:ee:09:22:52:76:68:7f:
         b2:36:fd:c4:61:03:4f:6c:5c:ca:28:a8:d2:6d:45:42:6c:29:
         35:0b:c6:c3:ac:11:a8:30:5d:27:80:b2:12:0d:16:f6:56:de:
         28:b4:bb:02:49:b5:7e:87:70:64:64:9a:c2:0e:a5:01:d7:d6:
         37:0f:54:39:1f:47:5f:cd:1e:77:74:fa:dc:82:f9:ef:77:92:
         9b:f2:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:56 2025 by rpki-client