Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/3650d78a-1e1d-3bae-b85d-d31edd6f8b57.roa
File:                     3650d78a-1e1d-3bae-b85d-d31edd6f8b57.roa (raw, json)
Hash identifier:          kZDd13+RFSIBF+uAeBx3MoDsQ+RsrlTs/EKvmLvL9NY=
Subject key identifier:   FA:B2:86:06:77:13:52:07:CD:60:EE:25:EC:91:5E:B8:FC:03:2C:16
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F43285848CC7B85A0B3BA8F3DA1A57F00
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/3650d78a-1e1d-3bae-b85d-d31edd6f8b57.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        107.191.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:85:a0:b3:ba:8f:3d:a1:a5:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=6455ec3d-550e-4682-a606-da432a01137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:6c:1e:cf:f2:7f:9d:52:2c:4a:76:bd:09:
                    59:c0:c8:f2:5e:ed:8c:96:da:4f:fa:80:c6:0e:55:
                    b5:5e:f7:68:70:0a:b4:2a:34:d1:9d:ef:f9:ba:2e:
                    39:9f:bd:3d:cb:96:1e:7d:58:3b:ec:08:71:98:c0:
                    92:23:ac:a8:14:fc:65:0c:cb:46:f5:2c:01:7b:5c:
                    77:d0:23:40:0a:e2:b0:74:d1:3a:a2:d2:1f:f1:83:
                    5c:a0:de:0f:85:8f:b9:6a:ca:7d:dc:9e:30:5b:5f:
                    14:d6:95:db:5c:6e:f7:dc:c8:17:8c:f5:1b:2f:46:
                    cd:4c:ce:93:31:2c:b5:a6:16:af:af:72:d9:79:78:
                    d1:f4:06:c6:2f:5a:df:c3:a7:fb:78:e2:93:ec:a8:
                    92:e9:c2:44:16:9a:f6:dc:81:c0:fe:1e:28:b1:7d:
                    0f:60:12:ca:00:da:97:ee:b6:72:b8:7c:37:62:77:
                    45:43:58:f0:f1:39:8a:ac:2d:53:3d:6b:9a:72:96:
                    66:e4:a5:61:bd:76:03:72:5a:9a:ad:21:a3:1c:28:
                    64:db:42:44:13:57:11:6a:a2:a5:f5:ce:c9:1c:7f:
                    d3:01:d0:57:7d:01:a4:77:52:bf:85:50:fc:3e:3a:
                    83:6b:a9:c9:94:28:ba:f5:e0:df:aa:ff:b9:dc:27:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:86:06:77:13:52:07:CD:60:EE:25:EC:91:5E:B8:FC:03:2C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/3650d78a-1e1d-3bae-b85d-d31edd6f8b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:5f:0e:82:b1:4a:28:20:a4:b4:8f:0f:78:1b:26:c8:1a:
         72:6b:b1:c1:82:0a:f0:26:9b:e3:a0:58:4f:91:7d:f0:ac:86:
         ad:3b:1b:2c:a0:c9:8a:e0:2c:8e:0f:0f:f2:cc:0d:da:bf:54:
         8f:d1:14:4d:5e:92:0c:48:41:0b:53:6f:5a:8e:16:c8:7f:3d:
         5f:14:ef:20:aa:cf:8b:00:55:bb:1c:10:10:1c:e9:f1:c0:fe:
         7a:7e:4d:23:45:0c:8c:e3:66:24:a6:e8:a3:d5:6e:22:ab:01:
         db:d0:26:13:a0:d1:8e:57:dc:28:f7:50:8a:40:0a:34:d0:10:
         9f:6f:b5:e0:00:e5:aa:c1:80:89:14:71:fd:47:ec:1e:c1:21:
         8c:82:77:f4:8f:31:42:fd:72:2d:93:80:3c:00:29:a7:98:ca:
         6e:8d:8a:89:cc:5c:be:04:2c:5b:85:db:4c:ae:61:91:43:f8:
         5c:f3:f1:be:96:ce:f5:9b:7e:89:03:90:64:25:a1:67:58:c4:
         9b:43:1e:e8:b8:fa:11:c4:75:f6:c1:48:34:65:9e:c5:75:e0:
         a1:10:8a:e4:19:f2:75:54:11:73:3b:41:bc:fb:7b:fb:1f:2b:
         80:97:a0:17:f1:2d:74:27:c9:67:b9:e1:17:52:c0:7a:f9:11:
         2a:74:d7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:19:50 2025 by rpki-client