Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa
File:                     70c26a25-b800-38fb-821f-aa7c442b84ad.roa (raw, json)
Hash identifier:          5hRYUf3E2VALQWNqpSP5y8+riZcX7XdNZ8pinYpe4LU=
Subject key identifier:   05:AA:16:E1:2F:AC:0D:04:E2:FC:A4:93:43:86:BB:7A:5C:8B:9C:A3
Certificate issuer:       /CN=10cf0e64-be53-4add-9414-d9b9f7f83aab
Certificate serial:       010D0C9F4328584957F40B7F05FF11DC77BA9E40
Authority key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     398906
IP address blocks:        203.217.148.0/23 maxlen: 23
                          203.217.148.0/24 maxlen: 24
                          203.217.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0b:7f:05:ff:11:dc:77:ba:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=aac6c6ed-191e-427b-adfa-03ba9d40b8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:49:31:64:b9:70:62:2b:81:4e:11:66:dd:
                    db:d5:28:70:58:e6:32:58:04:16:19:a7:fe:6e:12:
                    11:a2:7d:1b:02:ab:c8:7e:c3:47:0a:f7:6f:b5:84:
                    a5:0a:90:b5:25:2d:15:60:26:19:90:89:45:4d:0a:
                    18:53:4c:20:2f:72:fe:56:25:26:62:a2:e2:b6:c0:
                    77:ca:1c:b1:1f:25:3d:63:95:ae:2a:5c:b9:4d:d2:
                    dd:78:4c:77:87:bb:99:e4:9b:f3:06:81:fd:cd:da:
                    de:a5:ab:27:31:0c:bc:e6:a6:8d:3d:f7:3d:9c:71:
                    67:28:2b:31:84:46:77:86:18:ea:48:82:15:d9:5b:
                    c0:6f:a0:c1:a5:93:32:14:4f:23:f8:f3:5a:bc:eb:
                    b5:03:8a:57:c0:92:37:f1:ca:90:15:33:17:81:a4:
                    5d:f0:da:6d:b4:1e:c7:97:49:bc:a8:b9:2a:64:89:
                    be:b6:c1:b4:24:1c:46:a4:f4:e3:58:67:5b:c5:ef:
                    9f:e1:45:17:58:0e:44:a8:0a:7f:da:9d:39:17:f6:
                    f8:af:03:fe:2b:1f:a2:b5:08:48:54:37:29:b9:25:
                    1e:10:8c:6a:1b:c0:a0:17:8c:a6:4c:53:94:4d:88:
                    0a:6c:0e:e2:72:d1:64:46:01:9c:20:66:b2:8d:2a:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:16:E1:2F:AC:0D:04:E2:FC:A4:93:43:86:BB:7A:5C:8B:9C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl

            X509v3 Authority Key Identifier:
                keyid:19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:8e:ce:34:af:df:87:fd:c3:1f:a6:78:0e:82:89:9f:f0:
         9e:62:72:a8:21:6d:c8:7a:1c:83:57:af:75:d3:1c:a9:14:95:
         f2:5e:28:f1:74:78:d0:f4:de:a7:7f:db:5a:97:38:60:cb:cf:
         1e:f7:29:c5:c3:00:ef:61:3d:a8:8e:b1:4a:17:c8:8d:41:1c:
         d5:49:5c:68:b4:46:4a:59:e2:7f:bb:46:98:8a:57:19:40:c8:
         e3:23:5e:01:8a:84:b2:30:81:0b:f9:6d:30:19:d8:bc:05:57:
         6f:34:ef:06:cb:2c:60:be:b8:c0:8b:ff:84:54:0a:36:98:13:
         e0:9e:70:3c:b2:cd:27:0a:7d:f1:59:36:c9:73:6f:d3:5e:37:
         f4:c1:6e:93:96:97:87:16:27:a8:bb:42:33:92:5c:8b:a2:9f:
         e3:e8:1c:38:39:ab:88:65:62:c1:ac:7e:1e:ce:cc:5b:21:49:
         58:dc:25:c2:73:c9:19:29:32:76:a7:e5:45:c1:1c:92:5f:b0:
         8c:b6:3f:ce:a0:99:3e:6d:8b:f2:0f:95:b1:48:cd:1a:fb:a3:
         23:cd:f2:c8:2e:3d:d3:b0:d5:8a:9a:17:1d:41:84:33:c4:bf:
         13:2c:4e:c6:03:94:74:34:46:ec:75:10:2a:5e:f1:13:a8:41:
         ec:34:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:24 2025 by rpki-client