Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1ae11e8-ed21-3e6b-89d8-8814710db347.roa
File:                     e1ae11e8-ed21-3e6b-89d8-8814710db347.roa (raw, json)
Hash identifier:          djN5OMuhXKr4+crzxeoFWdWlxQyDEfgmU605tEf9ZcQ=
Subject key identifier:   27:55:3C:FF:63:5E:DC:7F:E6:C4:3C:8B:06:26:E7:C7:12:74:6A:5F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858488A166B023C1CED58474D2840
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1ae11e8-ed21-3e6b-89d8-8814710db347.roa
Signing time:             Tue 14 Jan 2025 07:13:37 +0000
ROA not before:           Tue 14 Jan 2025 07:13:37 +0000
ROA not after:            Mon 14 Apr 2025 06:13:37 +0000
asID:                     3949
IP address blocks:        206.54.2.128/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:16:6b:02:3c:1c:ed:58:47:4d:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 14 07:13:37 2025 GMT
            Not After : Apr 14 06:13:37 2025 GMT
        Subject: CN=1f1290df-fa1e-4578-850f-b97a597ff6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:88:fa:b4:7f:e9:7a:1a:58:ba:0c:06:66:
                    8c:7c:4a:58:54:37:15:f8:45:60:50:b9:d0:ad:5a:
                    73:ac:0d:b3:31:ad:06:a1:4b:a2:02:22:a8:8c:20:
                    37:79:35:2f:2a:78:c3:9b:a8:cb:75:ca:c2:94:44:
                    c2:40:dc:49:6e:9f:9f:63:e2:95:75:3e:89:38:a9:
                    e0:5f:2c:99:9c:bc:b3:40:61:d8:42:e8:7f:60:1d:
                    3d:9a:6d:69:5c:6e:05:c5:46:02:db:50:2b:d0:ff:
                    48:bf:64:4a:8a:2b:c6:45:7c:45:14:40:1d:20:ca:
                    33:b0:94:b2:87:43:ff:09:a3:62:c7:1a:08:a0:40:
                    54:f3:83:2c:65:50:91:dc:54:a2:f6:a1:3a:0f:cd:
                    63:06:0c:22:ca:50:65:1b:ec:bf:00:f4:88:b1:b9:
                    ec:65:ee:18:25:b9:bc:17:0d:31:da:66:af:6a:63:
                    ee:65:f0:c2:f8:e3:8c:5b:6c:24:2e:45:f9:1b:95:
                    78:ac:e6:ac:ec:ab:8e:a1:91:ab:1c:dd:8b:8d:ef:
                    56:49:c6:1b:cd:fd:dc:19:57:24:26:00:7c:0a:07:
                    b9:4b:35:e1:52:81:a8:80:5b:6d:35:87:9a:9f:0a:
                    9d:69:b8:19:1b:67:30:58:15:e8:76:1b:17:f4:d2:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:3C:FF:63:5E:DC:7F:E6:C4:3C:8B:06:26:E7:C7:12:74:6A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1ae11e8-ed21-3e6b-89d8-8814710db347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.2.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:0e:a7:47:8f:22:27:b1:b6:2a:3f:d9:8f:8c:b2:6e:2e:
         21:75:e6:d4:a0:bf:a8:25:e3:ab:bb:d9:27:6b:7b:11:e3:a8:
         dc:01:56:c3:62:92:68:11:f8:a6:3a:ad:df:e8:3e:18:bf:de:
         2f:e7:02:44:81:3b:97:4c:7e:35:8e:78:b8:68:a7:77:47:e2:
         db:db:f8:57:59:25:62:a4:d0:56:36:40:c8:43:5e:0d:75:a3:
         4e:f9:f9:00:29:7b:89:5c:f8:a3:5b:d1:d8:89:d9:79:69:00:
         99:28:33:4f:d4:64:40:55:92:74:19:32:96:c8:2f:e4:e4:7a:
         f4:21:ab:9c:c4:93:40:7b:83:43:6b:1b:b3:63:19:64:f4:0b:
         22:71:b7:20:33:2f:b3:13:32:e6:58:e5:16:15:b9:35:c8:5f:
         51:ec:1a:00:38:2c:e9:75:4a:f7:df:0b:76:30:c7:01:44:05:
         97:15:91:e7:ab:06:41:50:31:84:d5:3e:4b:19:32:41:ec:75:
         06:76:6e:7f:fc:5c:2c:75:00:a7:22:38:87:35:73:54:79:61:
         51:eb:23:75:62:c0:f1:84:76:ed:5a:33:28:df:75:10:08:a7:
         44:7a:fd:4f:4f:ad:4e:87:ee:2b:98:d0:7c:0e:58:e2:04:c1:
         3f:96:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:15 2025 by rpki-client