Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa
File:                     9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa (raw, json)
Hash identifier:          w/uc3yoxc81kZ57wJKD31+gucXt77vvq7X6QfbvG7aI=
Subject key identifier:   18:D5:93:DF:37:E9:FC:1C:FA:D3:D2:AB:9C:F5:12:54:3B:3D:B9:04
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848F65BDAABAAEA865956656B80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     396982
IP address blocks:        137.83.213.0/24 maxlen: 24
                          137.83.215.0/24 maxlen: 24
                          137.83.216.0/21 maxlen: 24
                          137.83.224.0/20 maxlen: 24
                          137.83.240.0/21 maxlen: 24
                          137.83.248.0/23 maxlen: 24
                          137.83.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:da:ab:aa:ea:86:59:56:65:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=1c807cf1-2f64-4a51-8ee3-1c2d6a7c1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:f1:3d:19:39:8a:51:c6:25:1c:69:a7:d1:
                    49:63:ad:6e:1c:ea:c9:2b:02:1d:28:43:a3:ab:da:
                    10:56:0d:d9:95:6b:4c:28:94:f2:d5:58:fd:53:84:
                    21:82:27:1e:04:96:e5:f8:61:63:dc:6b:50:e7:3b:
                    bb:f3:82:1e:e4:86:5b:51:62:c6:c2:f5:ff:4e:76:
                    fe:4d:24:cc:6f:59:ca:44:32:88:3f:d9:c7:7b:a8:
                    0e:94:22:6f:fa:fd:2b:5c:c4:1b:e4:19:b4:46:b7:
                    08:34:38:b8:e4:dd:21:35:ed:5f:16:ba:ad:50:b5:
                    ca:8b:3a:2d:39:23:53:1d:8e:c5:fa:3d:49:e1:de:
                    89:b9:af:85:ac:b1:23:2f:5c:9c:1e:30:3b:bb:ed:
                    f9:52:58:af:47:2b:88:a2:9a:77:51:72:c2:4a:86:
                    fd:6c:8c:7d:05:46:34:08:e0:d4:4e:28:ef:a6:2e:
                    70:f1:83:3d:4e:25:13:55:c3:20:40:ae:22:d3:fc:
                    53:26:7f:23:c3:c5:4d:9c:90:4e:68:d2:7e:fe:2f:
                    28:ab:19:01:fc:2e:80:c8:06:57:98:10:8f:1f:66:
                    3b:f7:d8:01:9a:5c:00:1b:3b:63:86:89:28:75:fa:
                    e1:4f:d4:25:1b:52:f7:17:01:f0:8a:11:f5:64:c9:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:93:DF:37:E9:FC:1C:FA:D3:D2:AB:9C:F5:12:54:3B:3D:B9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.213.0/24
                  137.83.215.0-137.83.250.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:01:22:65:66:9d:ff:88:36:5d:cf:9e:92:a4:d0:e3:44:72:
         ce:64:b0:76:e3:0b:3b:5e:bc:82:41:4d:a8:59:40:23:cc:39:
         6c:0c:ba:15:4a:f3:d8:77:8d:dc:fa:41:5a:61:44:43:a7:d0:
         c7:0e:34:5a:96:82:2f:25:20:af:41:3a:ff:35:ee:3d:8f:b7:
         40:56:c7:5c:b1:88:5f:c8:8a:04:a4:0d:40:32:47:96:32:03:
         e7:bf:f6:81:a2:b0:09:1e:d8:89:82:2c:7d:fc:ad:10:af:84:
         10:3b:b1:e7:6b:ef:b0:d8:6b:3a:9d:34:15:c7:21:8e:bb:14:
         74:c6:47:37:ea:a7:a9:c2:26:3b:5a:61:3b:06:9b:34:df:ed:
         bd:ff:69:a6:73:13:a1:e8:63:fa:3d:b8:3d:2a:e8:8d:45:7e:
         1c:20:38:c9:9a:a0:97:ee:0e:54:ca:7c:02:7e:cd:5d:9e:2b:
         1e:2e:fa:a9:4f:be:df:3b:25:60:f8:13:51:02:52:13:04:8d:
         0f:a4:f0:e4:41:49:b7:62:1b:ce:36:e0:14:79:2b:fb:68:60:
         a7:4e:10:51:8e:f9:f1:8e:95:47:7e:c6:c2:3a:44:59:1a:f4:
         ee:89:ca:e1:60:5a:4a:ce:42:21:7d:e6:79:5b:98:cd:ba:c5:
         15:a6:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:10 2025 by rpki-client