Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          muIRiSKXssyp51R5b4uF73D4YMBXKvOWmp4tbEwZcHg=
Subject key identifier:   E6:E5:0C:F5:F2:8F:5C:6B:FC:32:82:6C:A0:9D:AB:EA:FF:A5:45:CF
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F43285848E16BEBD593902EB79D946980
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:eb:d5:93:90:2e:b7:9d:94:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=01319cf2-509d-466a-93b6-10e26c94f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:94:ed:92:ef:d0:8e:04:d6:84:a4:00:2a:
                    e0:26:3d:20:d9:19:be:71:c3:3e:17:20:87:02:ae:
                    59:85:dc:e7:8b:e9:a9:e1:7d:98:ba:2a:4f:be:bd:
                    14:48:3f:ed:2e:c2:0a:ea:6c:61:a7:ac:43:f1:21:
                    af:dc:91:43:a9:55:af:55:60:09:c8:d4:c3:43:5b:
                    90:7c:ff:8c:be:f1:f0:f3:5a:8c:37:99:3a:b3:44:
                    5d:8b:f7:9b:97:96:7a:b1:64:8b:a9:3e:69:2e:74:
                    e1:9a:68:8c:6f:4a:91:f0:09:be:2b:1e:dc:b8:2b:
                    9b:2a:9e:5c:92:15:77:c0:bf:d4:c1:0d:03:9a:f5:
                    26:d9:f0:11:94:3a:86:27:03:af:58:b9:ed:17:a0:
                    c2:4e:91:67:06:a5:f9:89:3f:ab:d8:f5:a5:64:8a:
                    d1:97:55:d8:da:b1:f6:4f:f8:b8:f3:fb:6d:d2:a0:
                    02:cc:90:08:25:08:9e:c2:c6:2e:00:a2:f1:ee:6f:
                    de:ca:76:8f:76:c6:08:03:eb:e3:cd:17:6d:ed:d7:
                    8c:e8:c8:ae:b9:75:ee:9d:13:cd:ac:45:6e:ca:50:
                    f1:13:4a:03:d2:46:b3:de:99:4f:93:06:0e:62:59:
                    a3:94:5d:15:10:1f:c9:82:60:32:da:60:ea:86:35:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E5:0C:F5:F2:8F:5C:6B:FC:32:82:6C:A0:9D:AB:EA:FF:A5:45:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:95:60:c5:44:a8:98:ee:81:5a:bf:b1:e5:22:bf:2b:bc:
         72:e1:8b:2f:8a:53:64:be:06:32:10:8c:22:c3:05:e6:b3:16:
         25:f9:b4:0b:60:1a:a0:41:67:56:ec:d3:73:ff:df:88:a8:f3:
         a4:5c:01:1b:a5:32:de:b7:19:a7:dd:91:0a:60:82:e1:a0:54:
         17:e1:aa:2a:b3:52:5c:6a:6b:36:c3:29:53:91:8d:74:57:0b:
         f0:ee:e6:a9:9b:fc:7f:3c:b5:99:83:6a:a1:cd:46:9f:15:85:
         32:f7:3e:46:4b:a0:56:db:cf:18:36:58:c1:9e:08:17:e3:84:
         4d:33:45:8e:95:fe:3a:61:bd:9d:71:0a:29:b1:62:91:f3:89:
         1f:46:b6:8f:81:82:16:47:ff:a1:40:3d:bd:9e:a7:5f:ff:0e:
         8b:8d:a3:9b:5f:a1:48:2e:e4:39:b8:9a:46:f7:dd:da:08:1f:
         d6:2e:cb:bf:d4:52:a1:49:72:80:bd:07:b0:42:c3:ad:1d:f3:
         c9:5c:3b:ab:a2:14:b5:69:b5:2a:27:dc:eb:e1:b2:ca:21:24:
         a7:fd:17:ee:9a:d9:e1:b5:87:ca:0c:7d:6d:4e:dd:ad:64:a7:
         8b:9b:ee:79:d1:78:38:8f:95:04:93:66:48:a4:3e:ef:3f:92:
         52:58:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:54 2025 by rpki-client