Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa
File:                     24990911-53ac-3660-a099-8dbf6296634d.roa (raw, json)
Hash identifier:          D75B/J1cpXOMws2c9+V+L3uWV+6oCNpkpX8N3Q3MzHg=
Subject key identifier:   C4:4E:DF:46:2B:52:E3:38:44:58:7C:92:FD:4E:24:B7:62:06:7F:9A
Certificate issuer:       /CN=1278dcae-79cc-43c4-b974-7a8df750630c
Certificate serial:       010D0C9F432858491ED6D98E1082CF4571CAC600
Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     14244
IP address blocks:        208.91.60.0/22 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d9:8e:10:82:cf:45:71:ca:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=735093b4-b65a-4a4f-8527-734c9dcb29e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:ea:d6:53:b6:95:92:7c:39:49:89:ee:7f:
                    60:56:98:1a:3a:94:58:be:61:91:5f:e7:59:61:c2:
                    82:02:ef:00:69:5d:5c:69:b4:15:28:f9:ae:fc:c7:
                    17:d8:0e:cf:9a:2e:d8:67:24:b1:18:f3:e7:be:76:
                    34:8c:81:8d:b5:e9:ca:d8:9a:b0:ba:68:09:19:cd:
                    54:99:2d:5d:13:83:18:64:cb:9a:a4:15:93:3e:92:
                    36:cc:b3:a8:77:d4:c1:89:02:8a:9a:48:0a:06:f3:
                    56:4f:18:72:4c:53:21:0a:da:2e:43:b0:f6:67:3b:
                    83:8e:90:08:01:c3:f7:c9:46:17:fa:18:ef:d1:ed:
                    f5:55:1e:de:46:14:12:f2:70:47:3c:09:3e:6d:4a:
                    2c:03:9e:e1:c2:f5:e2:7c:17:91:c2:53:a9:1e:19:
                    d8:dd:1f:45:2c:a8:07:e6:f3:8a:aa:00:51:7c:bd:
                    a7:28:d7:dc:8a:ac:35:22:fa:95:ec:83:fa:5a:a3:
                    d2:4e:c4:d9:ef:f7:dd:99:46:7c:70:cd:fe:0e:85:
                    0e:c7:e9:18:9e:d8:3b:e2:3c:eb:c7:83:79:1b:48:
                    45:44:6b:eb:0f:88:d2:44:72:e4:dd:8c:74:f4:83:
                    be:bf:e2:6c:76:65:85:7d:86:33:c5:6c:e4:a2:71:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:DF:46:2B:52:E3:38:44:58:7C:92:FD:4E:24:B7:62:06:7F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl

            X509v3 Authority Key Identifier:
                keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:5c:40:60:f1:b0:5e:1c:d2:45:e2:33:aa:52:22:d0:f9:
         7e:1c:13:08:9c:e5:0d:5f:ef:66:29:75:43:20:8a:c7:0c:2a:
         7f:12:94:75:a9:cd:ab:f0:f7:1f:ee:65:cb:6c:f8:21:58:bb:
         f7:46:f0:94:be:a1:eb:76:eb:58:4f:ad:92:34:cb:5c:98:7b:
         6b:38:ad:6f:1c:ae:11:f4:fd:6c:fc:a5:cf:63:dc:5b:8b:d9:
         10:3f:8d:3e:05:a3:3f:28:96:54:7b:fc:b0:73:a5:09:ce:2c:
         13:d9:cd:c1:d1:aa:67:34:13:0c:70:2b:81:f1:a3:d3:46:63:
         05:89:93:a3:c2:bb:b4:32:e4:0e:c9:7f:fa:51:34:3c:84:87:
         60:8c:3f:f6:7a:5b:a3:04:18:f2:52:64:81:53:7d:44:4f:78:
         84:5f:96:87:81:76:cf:ac:66:bc:1c:91:e0:c7:1a:92:8f:ea:
         8e:bc:1c:2b:12:bc:2c:f2:a7:bd:6b:f9:6b:49:57:f7:fe:da:
         2f:e5:41:60:54:31:57:1c:dc:ad:f3:27:c3:36:ce:e2:13:21:
         7f:21:1d:7c:ac:e7:c4:c1:9c:55:c8:ac:cf:09:ff:9a:71:2a:
         5b:6b:c3:4b:53:d2:64:da:06:ef:f4:28:69:20:7d:72:92:b8:
         f2:09:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:24 2025 by rpki-client