Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa
File:                     a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa (raw, json)
Hash identifier:          +hcY/4eGLaCziKfVRkGNXZgSO+6DOKVSzfjDV/MRi+I=
Subject key identifier:   CD:F0:51:26:35:C9:04:64:96:CE:85:7D:82:31:E5:32:59:ED:DA:14
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858488AE09E03899E18EF459CDC80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     36103
IP address blocks:        202.69.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:9e:03:89:9e:18:ef:45:9c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=144f096c-6ecb-45b6-a476-73f1e67af385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:81:e3:e1:37:36:07:bc:f4:94:ff:0c:ad:
                    0d:2a:a2:e7:cb:65:b0:f0:d4:00:94:54:4d:84:93:
                    83:4f:1a:6d:df:9c:41:22:a2:7f:ac:8c:31:15:0d:
                    57:9c:02:97:8f:69:ce:bc:c4:cd:e4:70:b4:53:a0:
                    77:d4:2b:0d:25:cf:3e:8b:ee:0d:35:b1:a8:c4:1c:
                    3c:cc:b6:2e:93:a2:8d:cd:97:bb:e9:00:33:b4:6b:
                    bb:8c:36:fc:2d:a6:25:f9:5b:54:04:8f:86:66:73:
                    ec:ae:46:f9:de:22:c1:44:12:fe:84:ec:bc:49:cc:
                    2b:26:52:d3:d8:cf:0e:7b:2c:db:fc:23:08:ee:0c:
                    f0:5f:85:3d:61:a3:14:9c:bd:f6:ab:d5:cb:ec:dd:
                    f6:53:d5:92:01:66:0c:b4:b9:47:e7:5b:d9:d9:67:
                    ff:66:8f:30:51:3b:b8:8a:5d:d9:42:de:14:0f:ae:
                    2d:e0:e7:9b:21:fd:4b:f5:93:2b:68:b5:a5:00:0b:
                    3a:89:b6:39:38:19:43:fb:f6:5d:0e:f8:a5:50:d4:
                    6d:94:46:ec:be:ac:79:40:94:ff:04:76:d2:1d:29:
                    ba:bf:3e:d4:8a:78:12:53:3f:35:69:14:66:ba:4c:
                    0e:ba:8f:2c:cb:c6:57:ce:01:93:ac:e0:b8:2c:46:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:51:26:35:C9:04:64:96:CE:85:7D:82:31:E5:32:59:ED:DA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a0:cc:b1:07:d6:ed:2f:5a:95:b9:65:4f:42:1f:b9:84:81:
         bc:bf:e8:c5:92:03:18:da:eb:79:aa:cc:51:df:45:df:d4:83:
         f0:10:c2:bd:a0:63:a0:87:49:e7:08:da:6c:38:2d:3e:e5:da:
         97:04:64:a2:07:22:a8:16:7f:85:24:6a:4a:16:4c:f6:df:45:
         cc:d6:46:c4:82:37:02:03:81:16:b1:94:0b:86:d8:45:f9:f3:
         68:ed:9b:c6:6e:03:60:5a:ea:cb:68:53:14:19:46:77:41:6e:
         af:74:65:77:7a:9c:97:f6:7b:f3:1c:93:22:28:7a:95:93:65:
         5e:4f:be:f3:3d:f6:fd:6e:e9:9f:85:30:2a:2b:56:d4:8b:4a:
         cc:ba:12:6b:d9:13:8c:e6:01:78:3a:7d:a0:4d:f5:d1:0c:46:
         38:68:37:28:74:6c:61:3f:d8:cd:50:22:dc:e9:6d:76:2d:a2:
         73:56:76:73:53:f0:37:60:6b:00:87:3e:4e:b9:db:d8:ee:3a:
         24:fa:d2:94:d4:29:ce:f6:22:1c:13:b8:81:0a:69:16:af:a5:
         1f:5b:d6:cb:98:ed:46:58:cd:e2:76:dc:53:18:4f:6b:fd:d3:
         1d:79:09:58:61:29:03:31:28:e0:e9:0a:b0:41:4d:88:05:52:
         94:22:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:11 2025 by rpki-client