Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0c448ccd-c21f-37f6-9590-abd45c4e0fa9.roa
File:                     0c448ccd-c21f-37f6-9590-abd45c4e0fa9.roa (raw, json)
Hash identifier:          fDG8II+gRUZXZ4ZZN1SGd8ATpfK7TmdyjrF1MzwRjH0=
Subject key identifier:   AA:B4:F1:06:BD:8D:E1:B7:9B:15:F7:3B:07:B6:19:9A:02:34:24:08
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858494E2EAA93D9317C42F1728EE0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0c448ccd-c21f-37f6-9590-abd45c4e0fa9.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     23059
IP address blocks:        200.110.232.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:aa:93:d9:31:7c:42:f1:72:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=d0000bc0-c62f-44c8-9eb9-ca510b78d04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:5c:4a:bc:e9:95:76:89:0c:81:17:7c:e2:
                    c1:e7:ce:31:5d:56:32:a3:22:b3:cc:9a:ea:83:dd:
                    66:e4:84:48:c1:1d:0c:6a:e3:13:68:37:19:84:8b:
                    1e:52:55:99:6f:3d:66:61:49:91:e0:cf:49:a0:88:
                    ed:20:0c:58:e7:ff:73:00:e9:fb:fa:e2:38:64:7d:
                    91:1b:23:99:03:99:3f:15:9c:74:29:12:01:ca:9e:
                    75:69:5e:9c:16:95:41:f5:0c:e5:b5:6c:28:95:20:
                    e3:22:3c:52:05:32:e9:62:a1:dd:d8:49:43:4d:52:
                    79:d4:ba:df:e7:25:bd:4b:4f:91:a0:97:ce:69:c7:
                    b7:68:3c:0c:37:70:75:c9:d0:bc:7c:9b:29:77:0d:
                    3f:eb:b0:6f:c4:3b:26:72:80:31:bd:83:ce:19:18:
                    3d:c8:77:07:65:a3:fb:be:5b:1a:d6:90:43:6d:64:
                    8a:50:34:18:19:be:94:79:e6:f7:00:70:5b:04:59:
                    6d:e2:a2:33:72:1a:95:90:6f:02:f6:5d:a4:fd:59:
                    83:91:87:0e:54:53:18:1e:ac:6e:a3:ad:36:88:7d:
                    7a:12:95:42:96:87:c7:0b:f5:02:bc:e7:2f:63:a4:
                    4d:cc:b3:e0:b8:af:75:de:65:ef:7f:68:6a:21:bd:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:F1:06:BD:8D:E1:B7:9B:15:F7:3B:07:B6:19:9A:02:34:24:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0c448ccd-c21f-37f6-9590-abd45c4e0fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:c2:cc:ab:2a:82:df:b8:90:93:01:f3:1f:38:9c:77:2d:
         57:5c:34:1c:87:a3:af:f0:d1:b0:3b:76:8c:7b:d2:03:92:43:
         f0:5e:34:3a:4f:ea:7a:48:87:ff:e2:75:91:c5:d6:c4:16:7b:
         48:9d:ad:ea:29:80:29:77:d4:dc:a5:97:76:31:5d:7c:98:ec:
         c9:98:49:7a:4f:ff:0d:36:0d:8d:b2:b8:b6:f3:da:81:29:3f:
         18:62:73:d0:3f:dc:fc:33:80:2c:7a:e3:11:37:c3:21:f7:0a:
         8f:22:25:66:cc:1e:a4:d0:90:a6:e3:ef:90:df:e8:ed:63:4b:
         82:5f:11:98:c2:34:b3:f4:c0:0c:38:79:b2:73:74:12:9f:0e:
         d8:d2:64:e1:ff:a7:6f:f6:c2:72:9a:d9:07:a0:3f:31:54:db:
         e4:af:15:f1:18:a4:79:02:29:79:14:d3:f7:bf:d3:df:2a:32:
         aa:4b:cd:68:04:a0:de:c2:f9:d5:1d:af:7e:12:ec:34:c5:d4:
         fd:03:41:f8:9c:b9:b6:a0:27:7d:a2:f9:99:da:cc:15:c0:67:
         08:97:e0:fb:39:1b:69:af:12:be:a8:41:40:8b:15:2c:e9:bf:
         2d:d5:ae:66:79:97:dc:2e:f0:5b:16:b6:2e:0e:35:af:dc:b5:
         31:cf:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:21 2025 by rpki-client