Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/73843141-6690-3bb8-89ab-1db617e466b2.roa
File:                     73843141-6690-3bb8-89ab-1db617e466b2.roa (raw, json)
Hash identifier:          QCg0lyRVYP5q/co14xR4a4ELMWqstkgQs0itePLJfmo=
Subject key identifier:   5F:BB:CC:8F:4E:00:D3:11:52:8D:43:5D:EB:66:C4:AC:EE:10:F6:C2
Certificate issuer:       /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
Certificate serial:       010D0C9F43285848A72139CB533A57E39FDE8620
Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/73843141-6690-3bb8-89ab-1db617e466b2.roa
Signing time:             Fri 24 Jan 2025 16:53:50 +0000
ROA not before:           Fri 24 Jan 2025 16:53:50 +0000
ROA not after:            Thu 24 Apr 2025 15:53:50 +0000
asID:                     14618
IP address blocks:        208.80.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:21:39:cb:53:3a:57:e3:9f:de:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
        Validity
            Not Before: Jan 24 16:53:50 2025 GMT
            Not After : Apr 24 15:53:50 2025 GMT
        Subject: CN=843d63d5-2889-46d2-921b-bdc09430f5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:73:a3:26:03:5b:e5:65:f3:4e:48:60:d8:
                    78:45:c2:c0:82:fd:fe:f0:a7:2e:1b:7a:47:6c:6f:
                    f4:05:38:72:f3:ab:54:07:d9:53:70:c4:8c:56:ed:
                    ba:7c:09:a4:84:12:60:12:78:95:c2:dd:fc:6e:26:
                    c6:6f:5d:b6:b7:66:71:18:39:42:56:5c:5f:31:29:
                    c8:2f:ef:d6:ea:4f:ab:49:f8:59:66:7c:e5:1d:fa:
                    fe:e7:8a:30:6b:19:34:5a:fa:d5:94:d1:15:5c:25:
                    19:9e:f4:3b:a7:69:73:0e:41:40:76:43:49:47:79:
                    aa:b2:97:b2:7a:c8:be:62:75:1f:bc:be:40:50:78:
                    52:52:71:0d:5b:2e:74:0c:06:64:5a:f4:34:7f:00:
                    91:c2:a9:7e:b5:4b:34:f3:27:37:e8:1b:bf:d4:ba:
                    bd:bd:7c:07:41:a3:bc:a6:76:91:3e:c4:c0:33:e4:
                    a0:3e:0c:76:20:22:41:19:58:82:ab:11:84:78:3a:
                    c8:cb:ae:cf:ed:0f:5e:79:fc:6d:41:05:e4:1a:df:
                    6e:0d:82:04:cd:b4:f5:a2:8a:10:4f:00:d4:b8:bf:
                    c5:66:12:d5:68:81:09:95:95:78:74:ac:73:bc:eb:
                    59:65:ae:d3:77:a1:63:f8:6e:ed:f0:f2:b4:5b:48:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:CC:8F:4E:00:D3:11:52:8D:43:5D:EB:66:C4:AC:EE:10:F6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/73843141-6690-3bb8-89ab-1db617e466b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl

            X509v3 Authority Key Identifier:
                keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:82:4b:e4:4c:27:ed:e6:01:ed:cc:ad:0b:ed:30:8a:2e:9f:
         bf:9e:6e:b4:34:d3:aa:e5:c9:5c:69:5c:96:87:61:12:c9:36:
         42:0e:1a:bf:19:28:87:d0:dc:41:14:e9:ea:4d:87:11:22:b0:
         b6:3b:87:32:0b:99:87:e4:18:26:ec:11:64:cc:fd:98:1f:ad:
         39:27:bc:b5:69:41:58:e5:fc:ea:a6:b0:cf:92:22:8f:da:15:
         41:54:cf:fe:2a:56:a3:4e:a3:6b:b7:85:49:a4:33:bb:3e:d5:
         75:36:58:97:30:f5:fa:43:49:9b:de:27:60:26:a5:cf:8a:08:
         c8:14:c4:17:f0:b0:fe:4a:f8:96:b1:7c:3f:04:2a:e2:85:c8:
         24:c9:b1:5d:66:85:ee:4f:0e:a7:b3:d7:ad:ff:03:65:18:63:
         02:eb:95:6d:e7:af:f7:5f:97:ab:68:9d:61:37:0e:96:cb:f1:
         45:16:a1:7a:8d:3b:4b:4b:7a:55:ed:7a:9f:60:5c:22:87:21:
         0b:e5:89:0f:84:16:5c:05:52:44:f8:c6:93:c4:b5:44:02:4e:
         77:17:1c:f7:bf:91:af:7c:e1:68:88:e6:b8:a0:0a:c7:2b:75:
         fd:17:23:ae:b2:95:b8:40:3f:d7:60:f3:1f:42:77:ce:88:06:
         71:48:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:27 2025 by rpki-client