Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa
File:                     e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa (raw, json)
Hash identifier:          +x6zlEELz4VZD3D7JKVDs3HG5lF4ywTqpJeil05H+fs=
Subject key identifier:   13:F4:51:26:E8:C3:E3:78:2C:0E:B3:27:BA:37:BF:6D:13:62:A9:3E
Certificate issuer:       /CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f
Certificate serial:       010D0C9F432858492183FF3F1701C229F8AA4900
Authority key identifier: FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     21779
IP address blocks:        76.164.240.0/20 maxlen: 24
                          198.48.44.0/22 maxlen: 24
                          199.195.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ff:3f:17:01:c2:29:f8:aa:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=63e33cb6-dd73-449a-9922-841fb64081d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:3f:0e:c9:ba:59:71:b8:46:06:5c:dd:c4:
                    19:d0:9c:b8:9d:40:85:ec:64:de:a6:5a:d4:db:c5:
                    bb:16:0f:07:4e:f6:b6:b9:7e:c0:f9:f9:e1:07:1e:
                    a7:8c:ca:fb:fd:1c:7b:5c:b0:0e:b4:5c:23:07:c8:
                    34:45:81:83:d5:1d:f0:e3:2f:74:7c:37:6e:35:e5:
                    14:d2:a1:3e:a7:68:f9:93:a1:d1:af:2d:65:1c:c8:
                    ab:75:c7:bc:8b:ef:6a:fb:d5:dc:9e:2c:43:f3:80:
                    16:57:66:ad:66:b1:bc:98:f9:ae:58:85:91:19:01:
                    40:df:d5:4d:46:8e:07:cb:a5:f8:9d:76:88:c5:01:
                    97:1b:a9:5e:26:bb:e0:f6:74:0a:74:95:76:f6:3a:
                    78:5f:46:85:6a:79:64:7f:b7:71:bb:60:7b:c8:9e:
                    33:5b:d8:24:72:77:94:55:c1:dd:12:f9:7a:9d:fd:
                    fb:6b:bc:0f:64:b6:d2:2a:41:90:27:1e:8c:6d:25:
                    8a:08:8a:98:0e:f4:5b:05:c9:fb:f1:68:14:8c:68:
                    a4:30:e4:51:65:ea:92:a1:a7:e0:6b:b4:a4:13:fd:
                    de:e5:c7:66:1b:eb:23:9c:06:a4:8f:60:16:02:36:
                    0f:84:89:30:03:a4:af:a1:96:37:9e:64:36:59:5b:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:51:26:E8:C3:E3:78:2C:0E:B3:27:BA:37:BF:6D:13:62:A9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl

            X509v3 Authority Key Identifier:
                keyid:FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.240.0/20
                  198.48.44.0/22
                  199.195.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:b8:9c:12:2c:ea:83:72:80:83:80:c8:f7:9f:36:11:05:
         53:2d:a4:f7:e6:4e:aa:71:19:14:90:c7:cf:7e:1f:97:63:cb:
         e4:73:a1:d7:a6:7b:29:df:af:11:7e:3a:0d:16:22:0a:19:f6:
         0c:3f:81:3f:dd:51:14:42:9a:38:05:9a:df:bf:4b:13:eb:44:
         64:6e:c7:dc:86:ff:bc:a0:5c:53:af:c8:62:df:bc:4a:3b:d3:
         7a:c0:0c:50:4e:b3:a0:92:16:ce:14:19:69:02:54:15:6e:15:
         9f:7c:19:90:a0:7e:6a:52:c4:53:87:ec:76:99:20:fc:0d:0c:
         e4:eb:43:3a:c8:0e:3f:52:53:fb:ce:a8:55:ec:35:53:a1:2e:
         71:fe:92:eb:28:51:d5:13:22:6d:d9:21:86:54:76:98:f5:9b:
         1d:67:f1:e4:d1:be:de:12:77:9c:cc:f6:d9:2b:ec:70:71:88:
         78:ca:b9:ab:e8:ec:f0:67:2f:80:00:3c:ed:8b:4b:bc:81:4c:
         2a:9b:b7:f9:54:66:f1:2b:dc:0a:ab:40:48:14:0c:a7:9a:67:
         30:96:d3:fd:3b:56:47:db:46:94:c4:52:3e:ce:06:89:2b:ca:
         71:01:ac:13:eb:a7:53:34:21:0e:1f:3d:00:aa:6e:4a:f8:4e:
         e9:cc:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:13 2025 by rpki-client