Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa
File:                     b270954a-48c4-3971-aeb6-a89d93f59e0d.roa (raw, json)
Hash identifier:          JOpVBVPXUG4WaGuL2AbmuEfY1sTT8tXU8uD+tBcZZGI=
Subject key identifier:   D4:A9:D9:C8:EC:C8:16:1B:32:8F:D3:8B:DD:15:CA:EC:1E:F2:C0:78
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848C92E86EC512C2BB4E956DD80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa
Signing time:             Wed 05 Feb 2025 21:38:07 +0000
ROA not before:           Wed 05 Feb 2025 21:38:07 +0000
ROA not after:            Tue 06 May 2025 20:38:07 +0000
asID:                     23471
IP address blocks:        199.244.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:2e:86:ec:51:2c:2b:b4:e9:56:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb  5 21:38:07 2025 GMT
            Not After : May  6 20:38:07 2025 GMT
        Subject: CN=065fdc3a-e2d2-45c6-ade8-7f0c0009df92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:22:d4:78:23:ac:89:70:68:f7:38:39:22:
                    9e:da:7e:fc:21:97:cc:80:eb:0d:a1:c2:c5:59:c2:
                    e3:59:ad:0c:5f:48:cb:6c:fc:ee:87:7e:c5:d3:78:
                    63:74:41:66:71:6f:3a:7b:6b:08:ef:64:71:74:ad:
                    93:b9:eb:8f:b6:40:63:51:6e:78:b7:bb:b7:f1:6a:
                    1e:ca:13:64:18:82:42:8f:7f:d0:0f:01:5e:cc:2a:
                    79:e6:7b:88:ce:74:c3:62:36:d4:eb:33:92:de:1e:
                    50:dd:73:7b:5b:24:46:a6:8b:ae:15:c9:69:76:26:
                    3f:42:a1:74:7f:41:d7:54:21:95:a8:1e:d5:be:1f:
                    8c:a6:54:8e:3e:cd:a5:23:64:a5:4d:4f:09:47:ce:
                    50:ad:36:3e:49:61:ab:46:40:78:db:c5:ee:d2:36:
                    7a:8c:5d:24:a6:f4:90:5c:e2:8e:6c:12:b1:82:d1:
                    e0:1e:22:f4:c5:30:0e:88:22:f4:c2:f5:1c:9f:d1:
                    56:ca:29:c2:76:40:8e:e9:b6:37:82:f0:16:37:0b:
                    c6:9e:17:26:51:79:c9:da:3c:ef:be:fe:7a:91:d4:
                    42:37:c0:88:c5:cd:10:f4:97:6b:1e:52:b6:bc:c4:
                    48:de:bc:bb:c2:b0:50:64:c7:f2:58:89:bd:9c:3e:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A9:D9:C8:EC:C8:16:1B:32:8F:D3:8B:DD:15:CA:EC:1E:F2:C0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:4c:fd:73:b6:d9:1e:bc:d5:e8:8c:80:2e:d4:e6:45:53:
         fc:39:21:72:d8:fe:6a:48:7b:3d:ea:5c:0d:6b:01:c1:4f:99:
         36:ee:04:00:ba:4e:9f:a8:7e:e2:ac:9f:4d:75:02:50:bf:79:
         b1:3a:90:c5:d1:dc:76:5e:ac:35:d7:ba:ba:cd:9d:c2:42:08:
         e2:51:64:4b:53:a0:e9:94:36:0e:90:be:3c:02:8f:d0:6c:02:
         05:15:71:32:f0:d9:9e:41:4d:ce:35:b3:4c:6d:7e:ec:07:28:
         93:1a:a3:b4:cb:9f:fd:db:77:66:e1:ec:e5:d5:a9:c7:af:89:
         32:23:b2:90:d6:46:2c:05:f6:7f:00:b6:a1:b1:ac:33:ae:ac:
         ed:cf:70:66:1a:26:ea:4b:c1:f5:53:85:79:fa:58:d7:61:2a:
         e3:0a:44:91:bb:f6:0c:93:15:67:ca:4f:f5:01:15:62:73:ad:
         0f:7a:b0:d5:1f:0b:e1:2e:3c:b5:68:4c:dd:e0:46:4d:ce:f6:
         03:1c:d5:c7:6a:8d:f4:a4:97:31:a6:be:43:07:e3:64:b5:f4:
         72:77:1e:6a:bc:9c:50:2a:db:02:85:57:f1:59:43:7d:dd:28:
         c4:e8:ab:49:da:c0:79:46:07:5e:dd:1d:5a:2c:4e:12:7f:f9:
         9e:b8:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:48 2025 by rpki-client