Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
File:                     2725235d-11ba-361f-b603-889fb3fed103.roa (raw, json)
Hash identifier:          CpK7zFcSM6qztqh3BFZkRR9fhTf/rwIeJl94DT3MQvs=
Subject key identifier:   1F:21:C6:01:24:7E:25:92:89:97:7D:FE:2A:4F:BE:B5:9E:E3:A9:A3
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F432858493ED3D400D8EF635AF8DF3900
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     0
IP address blocks:        206.53.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d4:00:d8:ef:63:5a:f8:df:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=03a45408-7cdd-44c4-a84b-5c230bd8a58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:c7:a9:78:e6:bc:5d:ff:e2:78:6d:d8:b2:
                    97:0e:a5:5f:15:1a:85:fb:ef:23:d3:8c:c5:ba:d0:
                    6b:43:f7:98:ee:56:84:8c:a5:e4:e4:19:f4:be:f5:
                    ac:37:38:b8:d9:34:dc:f9:a6:19:96:f3:be:80:68:
                    ff:f6:8b:cb:35:25:b3:7d:e5:f9:f1:b3:71:9b:c1:
                    31:99:2d:6f:67:d1:52:3b:26:32:3d:45:86:b8:7a:
                    80:5b:24:c4:e6:db:ab:68:55:48:1f:b2:4e:1f:c4:
                    c7:0e:79:02:d0:24:ae:15:c9:ca:88:d6:55:a8:06:
                    d1:db:50:0c:a0:a1:25:d0:9b:19:4f:9d:d3:96:82:
                    9d:d1:42:b5:45:10:a7:ce:64:ba:8d:44:a8:15:9a:
                    14:a8:46:f0:7b:ec:0f:e2:01:46:f1:7d:a8:3f:0b:
                    0f:22:de:5f:e5:6c:b8:ec:36:48:a4:92:0a:cb:b2:
                    43:b8:47:a7:7f:cb:18:9c:d8:66:d6:82:9a:a8:1f:
                    3e:01:ed:a8:34:f8:0a:fb:44:f3:c1:5c:85:72:d6:
                    f4:83:a2:95:bd:ba:05:c6:01:7a:64:68:0e:df:8e:
                    8f:4c:59:0f:d9:76:6e:f7:a9:dc:c8:bd:57:ba:3b:
                    74:7f:aa:2f:89:bb:5b:d7:38:6d:0b:2a:99:06:8c:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:C6:01:24:7E:25:92:89:97:7D:FE:2A:4F:BE:B5:9E:E3:A9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:85:6c:2f:17:07:8d:83:3d:2f:b5:23:56:4f:ad:1f:8e:
         d4:3f:0a:0b:12:79:f6:d6:8f:25:4d:c9:4e:a2:41:96:74:2c:
         84:82:bf:a8:33:5d:86:12:4a:17:83:71:1b:d2:04:5e:85:64:
         3e:ca:dc:1b:e8:38:56:56:c5:0d:92:40:eb:a8:8c:b2:68:dd:
         d9:14:22:c5:d8:3b:cf:87:2b:44:32:3b:03:97:fd:3a:a5:f9:
         2f:f2:84:9f:50:5e:fa:88:1a:14:52:0a:f4:e4:a5:c8:ce:db:
         a8:5c:98:80:8f:3d:b2:89:5d:4d:cc:28:7f:e3:ff:95:5a:b1:
         3d:75:bb:10:d5:35:06:97:4a:d5:09:a9:5e:88:2c:56:45:ba:
         f2:2d:d8:b7:10:39:70:70:63:34:0e:e8:29:0a:ca:5b:c7:82:
         aa:4c:db:62:8d:15:9a:78:20:d7:7b:ac:b3:7a:ae:b5:f7:42:
         ac:ae:b7:c4:d4:96:c8:e6:cb:39:64:3f:d3:5d:1d:38:b0:94:
         13:fe:71:d8:c9:d0:31:24:53:2b:b3:b8:2d:a0:f4:07:85:a5:
         a7:b3:d9:3a:d6:2e:1e:e8:46:50:c8:43:75:e6:8e:44:18:ad:
         7c:3c:d9:50:4c:98:92:13:42:05:00:89:1a:6e:27:de:d9:65:
         a1:32:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:22 2025 by rpki-client