Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa
File:                     5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa (raw, json)
Hash identifier:          /+eepf4Iv9eCwdO4IqMF3lzM4U1vxi3iulYNr0f/v/k=
Subject key identifier:   5F:72:9B:F7:09:EF:EF:1C:3E:81:E0:C8:3F:B4:65:3F:26:BA:A1:F9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285848E00653A389F041E4EE58FA40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     205306
IP address blocks:        204.27.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:53:a3:89:f0:41:e4:ee:58:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1f789adf-4189-4ca8-b6c9-9dff9bdff8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a5:69:1d:45:bc:31:d3:4f:0a:4f:17:04:08:
                    e8:27:4c:d3:08:ef:47:ec:67:e5:9c:e4:ef:f2:83:
                    3e:18:d8:de:37:70:3b:53:c1:dc:6e:22:86:bd:38:
                    0e:c4:7c:17:76:9c:52:aa:19:86:1b:45:9b:62:5d:
                    7f:0c:d1:58:b8:72:69:37:62:7d:32:5e:64:67:2f:
                    ec:0b:81:4a:dd:72:86:37:0f:fe:f8:5e:8c:57:f9:
                    e4:b8:c0:c5:9b:dd:d3:8c:4e:b4:64:7b:24:ef:c3:
                    f5:eb:34:c1:e2:26:ca:4f:33:60:26:69:91:14:cd:
                    79:40:d8:6d:06:26:ae:99:f0:65:04:c5:ca:38:a7:
                    76:55:53:7e:fb:d2:51:d3:7a:8e:82:71:f0:ca:51:
                    29:e7:45:6a:0f:9c:d2:1c:1e:57:4f:39:15:7e:c5:
                    4a:1c:9b:5b:2e:19:c7:cc:02:a3:78:67:79:a0:9d:
                    cc:64:0f:83:45:d1:1b:12:e4:a0:c4:e6:13:00:95:
                    66:b5:e0:49:6d:91:b5:af:78:c7:4b:c2:02:0c:e7:
                    fd:a8:e7:fc:b3:df:e7:07:40:66:d3:fc:15:b0:16:
                    c4:83:7c:62:7e:78:a3:76:7f:2e:57:49:9c:b4:b3:
                    ce:e2:c0:82:ac:cc:95:52:bd:22:b2:a7:b8:cb:f0:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:9B:F7:09:EF:EF:1C:3E:81:E0:C8:3F:B4:65:3F:26:BA:A1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.27.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:f5:c7:15:cf:4a:c2:b1:6a:01:ad:05:43:30:01:49:04:
         73:9e:a7:26:01:b0:28:b6:0c:59:7b:3e:20:43:a8:0c:82:47:
         68:ff:c2:e7:1a:c2:49:09:24:58:30:07:74:12:84:2c:97:52:
         e3:28:f8:ee:98:3c:59:94:23:0b:af:04:d6:93:c5:0b:6e:f4:
         24:ad:c3:d5:ba:43:07:a7:59:e1:78:38:25:d8:8e:b9:e4:42:
         8d:13:b6:af:a1:99:7d:0d:34:1d:94:c4:81:02:73:2a:23:22:
         b4:51:4e:e4:c1:4c:79:44:63:b3:99:c7:28:0b:d7:ff:a1:1a:
         f3:d2:4f:5c:d3:ae:07:01:31:1d:eb:6e:8e:88:88:77:b0:25:
         7a:4b:fb:19:c1:fa:ee:75:13:20:ae:41:53:b3:21:70:62:05:
         90:a7:7e:bf:48:ba:ca:e7:b5:37:b2:de:03:be:d8:9b:ab:39:
         da:14:cb:42:e7:8e:60:1a:4b:cb:d3:53:c6:02:db:3a:95:3c:
         85:7d:02:53:c7:40:31:38:41:d2:d7:fa:5a:98:50:2d:da:dd:
         4d:56:00:b4:29:67:71:a7:c5:e4:4e:75:3c:18:09:d8:d9:32:
         ff:8c:8a:14:ac:f3:c9:23:f6:ce:1b:45:9c:0c:d1:17:6b:0f:
         c3:95:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:24 2025 by rpki-client