Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b5c05247-fef7-3f99-906f-b52865fada0b.roa
File:                     b5c05247-fef7-3f99-906f-b52865fada0b.roa (raw, json)
Hash identifier:          0VzbDYmvfoXuL/dzYNUW1BQBVlMdyrmxGJ8fRyXvI8M=
Subject key identifier:   78:5E:7C:B5:49:95:21:53:CF:C1:51:5D:13:A9:79:AC:1F:39:70:25
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584893655EEFD6BE9B5D60751A80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b5c05247-fef7-3f99-906f-b52865fada0b.roa
Signing time:             Fri 17 Jan 2025 15:14:58 +0000
ROA not before:           Fri 17 Jan 2025 15:14:58 +0000
ROA not after:            Thu 17 Apr 2025 14:14:58 +0000
asID:                     5769
IP address blocks:        209.145.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:65:5e:ef:d6:be:9b:5d:60:75:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 17 15:14:58 2025 GMT
            Not After : Apr 17 14:14:58 2025 GMT
        Subject: CN=9ae6ae81-cde6-4c7e-abdc-4617d931d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:ea:c7:fa:61:1d:8b:2a:33:81:43:02:14:
                    41:53:cc:28:f1:ca:ad:01:51:17:a4:cc:b2:bd:b7:
                    fb:a2:6e:c8:d4:f6:99:ec:24:20:d4:9d:fb:f4:ef:
                    30:81:18:cc:9c:74:30:fa:77:ae:a9:b2:2a:34:6b:
                    e2:f6:2a:93:6c:78:dd:56:32:b5:f0:41:7b:a2:29:
                    11:bf:c5:cf:90:9d:58:77:ff:f4:54:33:6d:5d:8a:
                    52:62:a0:f3:49:f1:e9:56:a5:6d:a8:3d:1c:ef:aa:
                    ed:5f:df:c8:2c:c6:23:ea:7e:74:a0:46:27:77:7d:
                    0f:7f:b2:ed:c9:f8:6c:c8:48:6c:b0:64:d6:a1:06:
                    b3:78:32:7e:bb:47:50:e4:a8:01:4c:85:e2:46:3e:
                    a7:b9:bf:a3:02:ab:c5:9e:8c:27:2d:81:99:1e:bd:
                    b5:fe:a0:91:a7:02:d1:af:38:28:0c:65:2a:02:90:
                    de:91:ee:95:94:bf:bf:99:8e:58:b6:3d:bb:63:ff:
                    a6:ba:5d:43:f5:7f:cf:63:fa:73:7c:b5:f9:10:f5:
                    e8:5d:02:c2:84:4a:c1:45:6f:1e:93:58:16:e2:60:
                    eb:82:9d:8a:ad:18:03:66:0e:0d:f9:e5:65:39:3c:
                    3a:04:d2:22:3e:f0:79:1f:0b:5b:cf:59:9b:43:3a:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:7C:B5:49:95:21:53:CF:C1:51:5D:13:A9:79:AC:1F:39:70:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b5c05247-fef7-3f99-906f-b52865fada0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:f9:02:cf:5d:78:70:88:3b:87:03:bc:bf:47:0f:89:87:
         a7:08:a4:1b:ec:ee:54:8a:a6:3c:e1:64:a3:13:64:f3:8f:a6:
         4e:af:e5:3e:ee:f2:b9:af:00:54:6e:5f:10:3a:5b:58:ca:cd:
         dd:db:97:56:f2:80:5a:13:7a:f7:59:60:dc:24:29:45:22:d0:
         ed:fc:b1:46:81:c9:2e:fa:34:cb:96:08:70:18:27:e3:c5:ee:
         ca:ad:b6:94:b7:c7:93:2c:69:dd:77:84:43:4b:42:4f:13:49:
         fc:a8:d4:7f:2a:ec:cb:f5:c1:cb:cd:60:2e:84:b6:fa:5b:bb:
         a2:04:bb:ac:c5:cc:3d:d3:11:e7:46:75:f3:01:66:f1:46:a7:
         9f:10:38:dc:09:56:1e:aa:aa:c9:ca:65:4d:c3:e7:9b:b9:51:
         bf:c8:e5:79:93:a3:9f:f6:24:ae:45:01:59:b0:19:30:18:a5:
         42:52:b2:78:49:22:c5:4d:51:e9:7f:7f:88:bd:ef:6c:f6:85:
         05:7d:12:9a:00:5c:af:0f:4f:02:4d:4d:7c:88:18:eb:e3:e1:
         aa:d6:d8:50:30:be:17:65:31:df:4a:de:a4:43:1f:7e:2f:41:
         96:68:56:59:4b:06:b0:1b:48:84:ca:ee:03:3f:ea:de:28:a0:
         9a:05:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:42 2025 by rpki-client