Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
File:                     8d86e371-b987-3a40-92a0-b73d73f009c3.roa (raw, json)
Hash identifier:          HhkNV/vY8VtMluZpiF9b6B1A/KEdGKPb0tDhaERrjxM=
Subject key identifier:   CB:48:24:C1:E9:75:C9:28:B2:DD:72:48:89:7A:29:22:14:D1:05:B8
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858494B640F7FEE45A5CF3C934400
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394893
IP address blocks:        205.234.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0f:7f:ee:45:a5:cf:3c:93:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=ca95e8b8-cd5c-4e5d-96e5-e2b50562d7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:3c:79:a2:c1:5e:09:65:6b:26:29:c4:96:
                    f1:3f:f9:01:61:78:13:c2:26:49:2f:87:86:81:d7:
                    6e:23:dc:ec:ae:59:f1:34:f1:20:73:82:15:77:9d:
                    84:01:30:e4:65:59:d4:a0:85:75:2f:6f:f7:f9:8a:
                    27:eb:56:b6:87:62:28:6a:db:c5:14:c4:62:4b:35:
                    2a:25:83:c8:ba:4a:97:4c:e2:e0:2f:87:1f:18:a8:
                    a3:68:50:c6:3d:de:c1:60:5f:0c:a5:5e:21:e9:9b:
                    cd:06:29:a5:a1:53:76:c1:40:ac:30:f9:90:3a:08:
                    af:0b:83:aa:74:43:eb:07:55:d2:8e:38:38:89:2c:
                    52:ce:cc:bb:41:61:53:3d:77:a2:27:e1:95:e2:16:
                    82:a4:76:7b:b1:73:3f:15:a9:d7:c7:e3:6d:9e:91:
                    07:92:5a:f8:a4:dc:6e:e4:77:4e:3a:ea:cc:82:32:
                    7d:2b:8f:2a:5f:33:64:de:b9:9f:8b:17:98:51:88:
                    82:2c:4c:c3:b2:42:a2:c3:cb:87:9f:98:ab:62:79:
                    f9:84:eb:27:e2:ea:1e:82:4f:4b:d8:7e:8a:d4:eb:
                    28:50:ed:8c:97:a8:93:e1:e5:22:a2:57:c6:ac:4c:
                    c6:23:c6:d4:f0:66:f5:b6:52:ac:2d:64:1a:b3:01:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:48:24:C1:E9:75:C9:28:B2:DD:72:48:89:7A:29:22:14:D1:05:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:88:01:08:22:92:86:b2:42:7d:62:d0:ed:ca:32:08:01:13:
         56:fa:74:0b:23:e2:15:6c:23:e1:d4:15:de:74:2f:ff:67:e2:
         73:e7:3e:a5:18:35:1a:dd:5c:2a:76:bc:f5:a2:ea:d0:39:28:
         98:83:f8:ef:0c:d7:a0:db:29:c9:f0:55:76:a9:f5:b5:2b:c9:
         3f:9b:af:e5:07:80:ba:ac:b9:5a:1b:86:e9:24:a3:f0:89:d4:
         44:d0:82:ab:a7:77:5f:fe:f7:ba:14:37:38:1b:10:03:4b:db:
         64:4a:d2:73:01:00:57:13:c0:50:82:b7:6f:85:10:dd:79:dc:
         db:99:0f:50:72:c0:cc:09:03:6b:4b:8d:c2:66:ab:03:d8:39:
         4d:fd:39:db:e3:ff:65:26:7d:a5:8a:2d:e2:62:ec:61:51:0e:
         5f:22:f6:ea:81:35:33:cd:0f:b6:3c:af:eb:e5:a1:33:87:ba:
         db:ba:6d:a0:6c:ac:2e:d3:92:da:b8:4d:15:e4:43:16:27:e3:
         02:35:b4:2e:87:87:13:63:fb:a3:7a:8d:8c:db:86:e7:54:eb:
         74:14:d1:bd:8a:81:2b:8a:27:ec:2e:6e:e6:f6:e7:a6:cf:56:
         ae:65:bb:2b:af:7b:d2:2f:bd:5f:01:cc:77:76:b5:d0:04:26:
         27:d2:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:31 2025 by rpki-client