Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/664d306f-ac51-3215-b5b5-43f2b79074bb.roa
File:                     664d306f-ac51-3215-b5b5-43f2b79074bb.roa (raw, json)
Hash identifier:          9AMCCYjJWD2Coim1SsTO+BG/ehmnObVQ3MZwjcTmmCg=
Subject key identifier:   F9:2E:2F:61:3D:15:E6:A7:DF:CA:2C:A3:5A:6D:50:4E:7A:41:34:6F
Certificate issuer:       /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial:       010D0C9F43285848D99D00250375D5F2DF7FA200
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/664d306f-ac51-3215-b5b5-43f2b79074bb.roa
Signing time:             Tue 11 Feb 2025 18:53:38 +0000
ROA not before:           Tue 11 Feb 2025 18:53:38 +0000
ROA not after:            Mon 12 May 2025 17:53:38 +0000
asID:                     4515
IP address blocks:        165.140.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:9d:00:25:03:75:d5:f2:df:7f:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
        Validity
            Not Before: Feb 11 18:53:38 2025 GMT
            Not After : May 12 17:53:38 2025 GMT
        Subject: CN=8afbc5e8-bac3-4c66-aec9-81c930f5f991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:9c:78:47:1e:e7:e7:99:76:5a:e1:ca:12:
                    3c:4e:99:04:47:c3:32:25:a7:47:2c:c8:e4:ae:25:
                    c5:1a:33:26:04:cc:17:c0:42:61:80:47:1c:60:02:
                    5f:45:b1:cf:27:0c:07:f2:67:6a:a0:ec:3d:c2:4a:
                    16:a5:31:4e:0f:a0:c2:d9:3d:0c:ff:ff:c7:57:84:
                    25:86:cc:22:1d:0e:66:ce:29:d7:dd:aa:73:0d:7b:
                    68:c4:80:2c:73:d6:d7:60:1c:ff:b9:fe:e7:f2:bc:
                    8f:a7:ee:53:af:61:2d:58:78:c6:87:9d:c0:66:7b:
                    f5:3c:e4:95:49:fc:86:2a:19:4f:53:63:db:c3:e5:
                    23:00:6a:63:8c:b1:88:60:7a:ee:36:f7:be:44:3a:
                    3b:e6:5d:21:fa:7a:30:a4:68:0f:4e:a5:f5:b3:d1:
                    77:c6:20:bd:90:eb:d1:13:55:e0:9f:e4:62:8c:4c:
                    70:88:88:33:02:3e:78:af:01:30:df:42:0b:4b:20:
                    94:ac:14:9d:98:38:7d:e1:fa:90:58:b4:a7:8b:16:
                    95:4b:ad:fb:eb:6d:aa:1e:fc:e2:87:db:93:0e:dc:
                    75:84:9d:1e:43:a2:b7:40:8e:94:45:d4:f7:11:37:
                    93:39:16:68:c2:8c:cb:c9:e5:2d:ff:6a:2e:c4:6f:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2E:2F:61:3D:15:E6:A7:DF:CA:2C:A3:5A:6D:50:4E:7A:41:34:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/664d306f-ac51-3215-b5b5-43f2b79074bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:fe:fe:b4:43:67:9d:4c:0d:7f:29:92:10:c8:8b:c7:dc:
         9f:c7:5d:19:51:b0:e1:cd:fb:07:39:45:c4:93:0e:ea:f7:7c:
         9c:51:90:24:cd:90:07:1d:fa:39:49:8c:a6:4a:43:c2:3e:c7:
         5c:23:86:fc:48:38:44:c5:b4:69:e6:71:d4:1b:8c:a3:29:67:
         60:90:f3:05:dc:43:24:74:5c:ac:ab:cb:0a:5d:d5:83:4d:de:
         30:d0:ad:98:06:69:25:f4:85:dd:8f:2a:ca:27:93:1d:65:bd:
         54:70:46:ed:8c:cd:ca:99:4b:8d:0b:f5:15:f4:2a:f6:b5:a1:
         5a:1d:38:1a:37:98:82:3e:6a:21:97:79:96:8a:15:93:56:50:
         ef:fc:a3:d2:71:66:b3:69:ed:87:38:68:70:60:d2:b6:16:09:
         4e:8f:e9:3c:12:78:94:95:01:9f:7b:3d:f1:39:4f:20:82:26:
         8b:58:e6:61:03:bd:f8:8b:86:f6:dc:19:1d:0c:56:11:d7:8b:
         3d:9e:b8:5e:36:54:8a:bf:cd:7a:8a:77:31:32:0e:ab:47:97:
         e9:2d:5f:be:9b:7d:54:36:b0:89:a4:5d:a2:f2:65:b1:ea:bb:
         35:6a:4b:ef:ca:20:d3:54:e0:c3:b4:61:4b:61:19:d6:ee:c9:
         df:46:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:55 2025 by rpki-client