Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/276bb491-1c81-3e5d-8294-c6c81f060285.roa
File:                     276bb491-1c81-3e5d-8294-c6c81f060285.roa (raw, json)
Hash identifier:          /whNvPNfZZIRit4TlGVusb6FIRbsWHSB54KJENY5ji0=
Subject key identifier:   0E:DD:91:10:05:F9:20:30:F7:1C:ED:B3:D8:CF:D7:81:BC:40:B6:50
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584955294BBD5D6E9ADBB2AFBA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/276bb491-1c81-3e5d-8294-c6c81f060285.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     2914
IP address blocks:        168.93.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:4b:bd:5d:6e:9a:db:b2:af:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=39a6a45a-bd61-4fcb-920a-e9092048b7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:c8:24:bf:cd:c9:5d:ee:af:2f:30:59:d6:
                    6d:79:19:a4:ec:30:51:0b:fe:15:9d:13:19:dd:c0:
                    c0:fc:e9:08:e5:9c:66:df:58:d2:75:3f:20:6c:85:
                    56:1c:91:c1:28:6a:f7:78:a8:e6:38:b4:43:56:5d:
                    9f:0b:cc:db:b2:cf:4e:e5:15:0e:46:32:2e:4c:2f:
                    7b:a7:c6:ca:4d:e9:d5:56:1d:ff:36:d7:84:d0:17:
                    60:b7:ba:87:40:23:4b:a6:7b:80:59:e2:c0:3c:64:
                    e7:00:f5:a1:d7:c0:5e:75:74:af:c8:8d:1c:ad:f4:
                    1a:ef:bf:f9:2f:d8:98:3c:52:73:1c:59:5b:3c:60:
                    c2:80:27:74:58:72:28:99:42:41:81:4f:2b:fc:e0:
                    89:96:a6:d2:ca:d6:10:d5:c5:d4:2b:a2:96:10:d6:
                    2b:59:c8:5b:29:3f:1a:0e:ab:c6:b4:b3:e4:51:b1:
                    5a:ea:14:a7:9f:c7:6c:a7:47:a9:c6:3b:49:79:98:
                    44:a7:05:10:5f:b1:03:a5:eb:bc:bf:a1:7f:be:11:
                    79:b8:14:5b:82:52:b0:c7:fb:2b:48:bd:34:4e:bc:
                    9a:4b:e9:90:74:49:a9:20:2e:c7:15:5d:70:fa:30:
                    95:98:54:e6:94:a2:9c:cf:eb:41:c2:b4:9a:28:17:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DD:91:10:05:F9:20:30:F7:1C:ED:B3:D8:CF:D7:81:BC:40:B6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/276bb491-1c81-3e5d-8294-c6c81f060285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:ad:36:2b:ae:a9:1d:5b:52:05:ad:a0:2f:51:c2:1f:cc:
         64:41:fc:f9:b5:a0:77:49:9a:b1:a6:dc:b4:a1:9d:36:94:2a:
         70:b6:39:20:9c:95:28:1f:ab:9b:40:41:97:8c:a7:fe:72:14:
         bb:cb:41:87:6e:1e:ca:29:1d:23:3a:2d:dd:97:14:ce:ad:57:
         f2:a8:a6:d7:5e:e1:69:8e:60:8e:a2:34:ae:af:0d:ea:04:98:
         3c:82:20:56:03:62:71:09:61:20:39:c2:06:13:87:9f:c3:60:
         56:43:b1:5e:6d:69:59:5c:7b:9c:ce:53:cc:38:0b:06:45:2a:
         6a:d6:c8:e0:bd:82:e7:0a:66:ac:e9:62:37:6d:03:1e:62:5f:
         60:c0:9f:0c:d2:32:b8:ae:27:32:60:01:20:09:55:43:98:9b:
         34:f8:e3:4c:78:ea:f5:f9:19:d6:f6:b7:b1:7e:89:eb:49:1a:
         cc:ef:a1:f4:74:40:6e:33:7a:88:a6:46:06:5e:93:1d:52:d8:
         ba:8f:84:8e:f3:db:45:97:e3:4f:02:28:6f:8b:75:37:71:5a:
         01:28:d6:4a:b7:17:66:f7:3b:2d:20:b1:65:46:c3:f4:4e:cd:
         84:f3:e3:9a:8e:53:8b:b4:c1:d4:87:ea:ff:df:e5:51:f4:f2:
         f5:38:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:13 2025 by rpki-client