Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
File:                     f37b0714-1ede-3dcb-b67f-5210b56493fc.roa (raw, json)
Hash identifier:          rBDzF7DwnnuPW5kzgw/DpXG8jrtTQkJGRgULmUqdWxc=
Subject key identifier:   2C:D1:63:92:0F:B8:2E:45:33:43:7F:7E:B8:7D:2F:1C:9D:A5:58:01
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584957F41004F01EDD834A068330
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        76.164.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:10:04:f0:1e:dd:83:4a:06:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=959e5362-cae8-4510-9de8-84294a1775fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:4a:9b:30:35:fd:a0:33:d4:a9:e9:ba:12:
                    5a:ab:6b:34:bb:7a:ac:c7:f4:f4:08:ed:8c:a9:59:
                    b1:d2:d2:c6:e9:2c:9a:67:fa:ee:88:41:cc:4b:36:
                    a2:d9:10:9d:e8:e3:94:92:20:2c:63:66:f4:b6:13:
                    7a:c2:a1:1c:a6:2f:be:eb:7e:36:1a:5f:dc:db:9a:
                    34:98:b2:93:dd:92:fc:ff:f8:89:0c:e9:6b:6c:c3:
                    2c:9e:eb:f4:d1:40:ca:bc:d4:f0:d4:89:06:47:0b:
                    1e:f9:34:3a:14:13:3d:36:96:ba:3d:73:9f:3f:6b:
                    ea:e9:4c:86:ad:a1:ac:94:ef:9e:0d:46:ae:be:29:
                    fd:9f:87:5e:77:d1:18:63:64:38:90:a4:94:0b:72:
                    91:e0:c5:9a:c6:7c:a7:32:7e:b1:d0:af:9d:1d:a2:
                    09:e2:f1:52:07:cd:2c:1f:8a:be:de:05:a8:17:ea:
                    66:4d:d4:af:d5:c7:5c:ba:1e:7a:63:bf:74:e5:d4:
                    eb:7d:e8:b8:07:ad:3e:c1:4c:12:fd:4e:0f:cd:00:
                    b5:8c:4d:58:cb:7e:89:c8:ab:9c:e9:bf:ce:78:58:
                    be:56:92:0c:2b:7d:93:17:91:c3:e5:a8:58:4d:4a:
                    0b:c1:17:e7:16:36:b6:36:86:3c:4d:c6:0b:c4:0f:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:63:92:0F:B8:2E:45:33:43:7F:7E:B8:7D:2F:1C:9D:A5:58:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:cf:72:bc:93:c7:79:28:8c:f7:45:fd:8d:ff:86:ca:39:
         1f:3a:34:4e:b3:c3:e9:c5:75:98:25:ba:2c:bf:b9:45:cf:83:
         47:48:c1:a7:ff:c7:10:96:6e:7a:6b:2f:40:3f:40:09:f2:8e:
         46:eb:9e:e0:be:49:4c:0c:29:d7:97:9c:9d:cf:a1:bc:70:3e:
         da:02:7e:49:39:a0:c7:eb:56:8e:0a:cb:cb:14:ad:c9:48:9e:
         78:1d:24:2f:60:f9:fc:d2:65:db:18:5a:98:80:1f:b2:af:22:
         b7:06:f5:32:6f:28:7d:f7:c6:b7:c5:27:67:9d:be:7d:c2:33:
         00:b6:08:32:ae:a6:5a:f8:55:e3:90:2b:be:4d:e1:3b:b9:53:
         96:de:54:43:c8:14:8b:6e:56:f9:68:fa:e2:4e:62:91:e3:54:
         c6:31:39:51:bb:b6:4d:fd:c3:7a:27:fe:d0:8d:a7:d1:7d:f4:
         5f:64:9f:0e:81:7f:7e:8a:ff:46:63:0c:0a:b9:13:81:91:9a:
         b1:3b:03:98:f7:2b:c7:79:52:fb:47:47:53:65:2b:7b:79:b1:
         f3:4e:2c:0a:fb:ce:9e:7c:3b:38:63:53:75:55:d6:d0:00:bc:
         40:18:06:76:01:92:11:d0:14:fa:21:c8:88:29:1e:aa:96:8c:
         85:03:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:41 2025 by rpki-client