Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/f70a9256-3fb2-3e60-b1ae-03ff1e25f8e1.roa
File:                     f70a9256-3fb2-3e60-b1ae-03ff1e25f8e1.roa (raw, json)
Hash identifier:          O4q3XDaJ/hI/Axsbj5uVfKP70Ms1tQZT1ujPxgU6g1I=
Subject key identifier:   3D:94:5D:53:9F:C3:31:95:BC:5B:CB:A0:42:8F:3E:F3:25:7D:63:3F
Certificate issuer:       /CN=e1244068-c968-4296-891d-ffade60c06ee
Certificate serial:       010D0C9F43285848D7A648DB03A42BD9E8AB5880
Authority key identifier: 12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/f70a9256-3fb2-3e60-b1ae-03ff1e25f8e1.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     60068
IP address blocks:        110.44.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:48:db:03:a4:2b:d9:e8:ab:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1244068-c968-4296-891d-ffade60c06ee
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=be743d34-915b-4f32-b6ec-b38df3d1076f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:2f:88:50:a6:b9:97:a9:d2:07:e3:db:3c:
                    03:3a:30:f8:c4:0b:fc:44:5f:84:e5:a6:77:43:90:
                    96:fc:af:98:f7:cf:30:23:18:7c:2e:0b:df:26:25:
                    22:57:52:37:2d:a1:78:18:05:f9:59:29:bd:3b:16:
                    da:45:6c:cf:48:81:42:eb:19:d3:62:56:a3:32:0b:
                    0c:ef:c5:de:b9:0f:07:c9:c3:9d:1a:8b:d7:21:3f:
                    d1:66:29:87:d1:34:ae:67:89:fb:78:a3:4e:bd:66:
                    8d:46:65:f9:a2:92:bc:99:23:9e:42:07:12:0b:0a:
                    f2:48:42:14:e0:94:08:d3:12:4b:2c:31:b4:75:64:
                    26:d1:a2:7b:c6:34:46:48:c0:a4:e4:b2:b9:18:2e:
                    6b:f1:b9:5e:29:a6:85:98:a9:6d:cc:d3:63:13:1a:
                    aa:59:53:85:f6:24:42:e8:d0:d8:83:1b:66:e7:d0:
                    e2:9a:0f:72:b8:a7:3a:84:a6:22:44:6a:66:50:ea:
                    07:bc:d7:2f:bd:cb:7d:07:80:c7:9c:d7:5c:1c:0e:
                    f5:8c:69:7d:67:c3:45:0b:33:74:6b:b3:15:5f:fd:
                    2f:f8:ed:9a:26:df:a2:6f:92:ea:73:02:fb:30:53:
                    fb:03:2d:12:61:9a:c8:fa:4a:00:93:d4:94:e5:d2:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:94:5D:53:9F:C3:31:95:BC:5B:CB:A0:42:8F:3E:F3:25:7D:63:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/f70a9256-3fb2-3e60-b1ae-03ff1e25f8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.crl

            X509v3 Authority Key Identifier:
                keyid:12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:10:f2:39:47:83:7a:06:50:b1:10:40:17:3f:ae:40:a2:41:
         20:4f:e0:65:b0:da:40:4f:c3:9b:77:07:f9:2e:76:7e:11:0e:
         46:87:39:f2:de:c6:d2:55:38:04:b0:c5:b7:e0:7a:6e:0a:a7:
         6b:f1:cd:18:a6:c6:59:e4:b5:a2:57:4e:56:06:cc:e7:09:6b:
         18:76:18:51:21:c3:b2:d9:72:46:6e:d0:8e:b6:51:e3:67:16:
         36:c5:6c:a3:c5:67:12:27:a3:ce:7d:82:91:dc:d1:bf:93:af:
         64:b0:98:4c:7d:f7:65:02:b5:8e:60:25:c7:9d:8e:45:f5:b4:
         43:5f:a0:82:d1:35:d6:be:35:7d:3d:eb:63:11:ec:6d:bc:04:
         70:91:b0:c3:19:c4:52:16:64:d2:00:27:41:6f:8f:e1:74:c1:
         b5:b1:4a:45:d1:09:7d:86:72:9b:b4:81:7b:41:68:b6:c0:82:
         c0:b7:ca:0d:66:c0:c5:eb:f8:b9:92:c7:77:0f:d4:4a:78:ab:
         d7:42:32:9d:bd:7f:4a:6f:06:01:d9:67:f3:76:21:39:61:f3:
         1f:43:31:75:05:dd:54:0f:b6:51:a2:27:a5:16:67:05:33:08:
         2a:79:75:a6:d7:b7:eb:b7:1e:17:4a:95:50:0e:cc:dd:93:3f:
         2c:6a:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:19 2025 by rpki-client