Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
File:                     ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa (raw, json)
Hash identifier:          Umpr1tpZeLToJAiyaFJlLjqoyZ4NnwnTKISZuabGI5g=
Subject key identifier:   E7:AB:EA:C7:CC:87:65:15:D9:86:18:4E:09:AF:61:72:2B:92:CA:93
Certificate issuer:       /CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
Certificate serial:       010D0C9F432858489075EF24B2F115841B0C3FC0
Authority key identifier: B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     399252
IP address blocks:        140.106.80.0/20 maxlen: 24
                          207.66.80.0/20 maxlen: 24
                          2606:3240::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:ef:24:b2:f1:15:84:1b:0c:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=708533b4-db2e-4db3-9691-7343f269be24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:bd:4b:c9:6e:ca:88:f7:7c:d5:a5:49:df:
                    04:72:7d:0c:87:a4:7f:75:f2:c0:f1:17:a5:cd:17:
                    39:ae:bc:0a:bb:97:58:cc:61:c1:02:fc:d2:6c:78:
                    dc:f5:66:82:d8:b6:ab:af:c3:1a:30:03:c9:48:70:
                    19:7b:03:75:3e:4a:29:6f:b9:79:85:be:af:d4:bb:
                    79:ca:0a:eb:fd:a3:40:11:3f:31:51:bb:a3:88:7f:
                    f8:be:dd:14:ba:8d:36:29:99:0b:87:06:c5:7a:fe:
                    d2:a1:20:25:00:07:6b:ca:84:78:c4:77:67:ca:75:
                    71:88:f5:9f:e8:24:58:91:f1:e1:75:93:ef:bd:b7:
                    5a:0f:61:4e:63:1b:45:23:d3:e8:92:db:01:8a:6c:
                    c5:9a:b5:d6:6b:51:d2:e9:17:d2:47:ca:f2:81:30:
                    42:46:50:03:01:99:8c:58:7d:1e:89:67:8d:77:fc:
                    3b:d3:fa:66:26:6c:78:0b:16:f5:06:63:05:5c:79:
                    6e:5a:a4:85:f7:02:55:e7:1a:09:50:c1:5f:8d:60:
                    b6:44:93:1f:40:01:1a:e2:6c:44:d5:3d:36:3e:2c:
                    98:71:01:4e:f1:7b:58:af:96:7c:8e:96:78:1c:a5:
                    44:d3:03:5c:1b:dc:be:02:61:55:98:98:e4:a9:a5:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AB:EA:C7:CC:87:65:15:D9:86:18:4E:09:AF:61:72:2B:92:CA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl

            X509v3 Authority Key Identifier:
                keyid:B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.80.0/20
                  207.66.80.0/20
                IPv6:
                  2606:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:13:03:dd:00:c8:8f:c3:33:20:ff:30:e1:68:ec:ea:f4:
         2a:01:73:29:b0:be:46:0b:83:14:3e:db:03:40:2e:b2:12:81:
         43:75:11:cf:3e:7c:3a:6a:b6:4c:bd:bf:71:8c:c8:8f:db:c0:
         5a:3d:57:d8:14:78:5c:de:19:66:64:d6:71:34:25:81:4e:8d:
         91:07:e6:fc:7e:c5:c1:a6:29:df:b6:93:17:7c:d0:e3:e0:a1:
         40:a6:dd:04:1f:93:6c:bb:7a:ed:57:6b:5e:fb:3d:9d:f2:e0:
         c7:35:81:d8:50:87:53:6a:3a:01:55:e3:a8:d6:90:a8:c9:1a:
         fe:24:84:54:6a:6f:7d:cc:88:34:fa:24:38:77:f4:9e:61:06:
         a3:2a:62:81:79:68:2c:16:eb:8d:2d:26:95:66:9c:52:bb:88:
         2f:8f:b4:22:02:26:b4:63:c6:66:f5:2c:61:6e:dc:4b:a4:5e:
         8d:62:ae:9d:b5:cc:08:87:f5:dd:c2:7e:e3:0f:9a:fe:42:30:
         28:71:e9:5e:f6:f8:96:54:a2:b0:37:c7:23:07:09:23:53:3f:
         d9:b0:28:33:14:19:62:30:ca:f6:ad:56:b8:39:83:65:1d:ae:
         6f:5d:ed:86:90:0c:14:7c:8e:98:b7:d7:a9:98:8c:09:66:09:
         bd:52:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:50 2025 by rpki-client