Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa
File:                     eead68f8-e203-32f6-9c05-c30eb025fea8.roa (raw, json)
Hash identifier:          tAS7FQCKXs9xBx86OeP7IQZ6zx+7m4NWQhX3UxsWXR8=
Subject key identifier:   2B:76:23:E8:9D:9B:38:7E:F5:8C:EE:2E:A8:0D:80:03:87:A2:9E:9E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584919418872CD26BE31DDE4DD20
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     397601
IP address blocks:        204.2.178.80/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:88:72:cd:26:be:31:dd:e4:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=a731379c-9dfd-4667-8fb9-b5f7fe69ad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:97:7c:92:4a:61:7a:a8:ec:34:5f:2b:5c:
                    54:b3:5d:c8:c7:91:3e:fc:5b:c7:d0:d3:9a:45:ef:
                    79:67:67:f2:c5:89:9b:6e:92:58:ea:97:c4:b6:94:
                    40:d2:d7:17:de:82:a1:b2:b6:6d:c8:f4:92:bc:f1:
                    d9:52:63:a7:96:c1:77:f9:d1:c4:90:21:e0:e6:94:
                    a1:80:6a:f6:fa:80:6b:bb:85:60:30:20:32:5b:3e:
                    84:f6:b0:26:c8:f6:3f:3c:04:c4:ce:02:13:2f:61:
                    a5:63:d7:00:b8:81:78:90:81:37:d9:7c:18:d6:2f:
                    f9:36:5a:38:c1:63:0f:92:10:27:09:2b:aa:57:e0:
                    1e:1a:e5:b6:1d:58:b4:9f:bd:5d:3e:a4:f4:c8:8a:
                    36:8c:b8:33:99:97:34:f6:fb:34:85:b1:77:60:88:
                    65:d5:56:7e:61:41:7b:7a:65:40:45:35:31:58:0c:
                    17:47:69:80:c3:0d:c2:3e:7e:d4:6f:d8:0b:6e:6c:
                    33:fd:7d:6c:a9:df:28:7e:4c:3c:4e:fc:fa:63:92:
                    3e:a6:3b:c7:d4:a6:5e:1e:85:d5:0f:e6:8f:7b:72:
                    13:37:21:40:d8:02:7b:ca:03:e0:3d:0b:90:f3:05:
                    3e:bb:8b:82:be:6e:e9:a2:69:92:72:e3:56:a7:3c:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:23:E8:9D:9B:38:7E:F5:8C:EE:2E:A8:0D:80:03:87:A2:9E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.178.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:86:93:31:4b:c0:dc:95:96:2b:d0:2f:fa:a5:79:fa:04:
         ca:2f:31:10:e6:31:32:82:a4:f0:c0:2e:d5:77:a0:33:75:bc:
         ec:73:97:f8:eb:4b:5e:c2:7f:64:78:99:7a:f0:1c:03:df:11:
         cc:12:f9:09:82:ed:ce:e8:64:0f:75:56:41:98:03:f2:d3:23:
         96:76:4e:c8:9a:fe:af:90:01:67:54:6d:6c:8c:c8:c7:bb:69:
         40:ad:bb:02:eb:41:00:e8:19:e5:93:3f:ac:27:2e:15:5c:0b:
         a3:2d:e5:7a:66:c0:01:d1:61:91:b6:32:6f:44:0d:59:e7:c9:
         dc:7d:f6:1f:bf:55:aa:bd:e2:3e:47:87:53:aa:64:3a:5b:40:
         77:1c:a4:5e:90:7e:d4:76:2c:41:00:ae:71:e3:9f:a0:62:28:
         38:a1:9e:c2:c9:df:0d:32:7f:99:0d:d7:77:0f:1f:a3:ea:47:
         06:e2:94:38:c6:14:74:5a:99:5e:db:b7:4a:70:34:2c:d7:e0:
         c9:5e:23:2f:78:cb:b6:5c:6a:40:45:2a:25:79:1d:cd:cc:96:
         43:73:b0:10:0e:38:7d:5a:6a:a0:04:83:ed:38:9f:8a:4c:32:
         9b:f5:47:78:b3:a2:f7:a1:d6:03:9d:e1:3d:e6:34:3a:38:bd:
         75:65:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:16:11 2025 by rpki-client