Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
File:                     238aa101-b943-3077-86c9-57b2750b798f.roa (raw, json)
Hash identifier:          z2Ms5TrP5AaSCKCKCja0dM7JnkG598X8HAVIs2XqU+Y=
Subject key identifier:   34:A7:13:7E:9D:FE:80:B2:7F:20:D1:8C:BF:BF:AB:8B:8E:08:EA:97
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92684AC5352F8292AC33440
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     63296
IP address blocks:        208.185.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:84:ac:53:52:f8:29:2a:c3:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=7695e2ce-3fd6-40a2-9818-f5e32595b7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:20:32:fc:14:ed:58:9b:1c:a7:6e:69:51:
                    67:31:37:85:0d:83:7c:cd:ee:24:d2:05:ec:8e:a9:
                    e2:1d:bb:0f:b9:22:f4:b3:85:e2:9a:60:d8:90:00:
                    8e:a5:36:16:68:8f:69:00:1c:66:ea:5b:91:cf:f2:
                    f8:50:55:08:0d:37:8b:8e:27:f6:ce:56:bc:6c:37:
                    aa:d7:84:f6:22:8d:88:96:7d:29:49:a5:b8:bf:0f:
                    94:ff:f6:d2:07:ec:55:f5:e9:98:d3:1e:89:07:77:
                    53:18:4a:e1:04:43:9d:29:e4:c4:b3:74:a4:df:b8:
                    cc:78:88:ac:3b:7e:a0:ce:dc:16:4e:a2:0f:1d:95:
                    0b:c2:dc:40:15:93:ec:00:6a:a6:92:83:ef:88:9d:
                    2d:fd:91:d0:a9:d6:b0:56:ca:21:c1:dc:40:1d:bf:
                    f5:cc:bd:fb:dd:42:01:fa:67:5a:52:2c:de:f6:d8:
                    4b:64:f1:a6:e7:c7:03:0f:72:6c:9b:a9:7f:3a:57:
                    ef:32:3d:76:25:8f:0d:78:4d:ae:fd:ec:fd:cd:60:
                    1e:2b:ac:f2:85:52:0a:37:c4:21:6a:63:29:cb:a6:
                    3d:5f:4f:6b:bd:64:a1:16:6c:ec:bc:f7:8c:57:01:
                    83:15:a8:1c:f7:c3:63:31:75:17:7a:26:e9:ab:a6:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:13:7E:9D:FE:80:B2:7F:20:D1:8C:BF:BF:AB:8B:8E:08:EA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:28:8d:73:cc:d5:8f:b6:99:c2:5e:3e:e3:be:5f:36:8b:
         18:69:6d:0c:48:0c:b0:c5:9f:87:ff:e3:9d:d0:c1:d7:fa:ea:
         3c:a4:b7:09:64:28:4d:1f:5d:18:95:f9:4b:47:af:76:cb:cd:
         99:73:e5:6b:89:ae:e8:da:17:0c:3f:50:c1:95:6a:e6:ef:e7:
         b8:af:ae:ad:59:4f:7f:bc:84:16:5c:4b:56:fc:5b:37:b2:ec:
         b5:1d:bd:2b:75:00:81:21:c2:c2:b7:fb:a1:79:13:2d:e6:ee:
         26:8f:89:fd:7a:12:99:5a:c1:4d:73:3c:e6:b8:2d:9f:03:3f:
         ae:bb:b5:cc:3b:69:ce:8f:f9:7c:1e:2b:80:da:75:11:e7:84:
         0e:47:48:08:a8:ba:c7:3f:25:dc:fb:37:80:07:f3:d0:41:5c:
         b2:e6:3e:ff:95:b5:db:35:ea:39:5d:63:f0:68:60:a5:17:4c:
         fe:60:2a:93:36:d3:b5:72:c4:41:99:2e:60:3a:00:83:d3:cf:
         24:43:46:b9:cd:8c:5e:08:90:2b:9d:17:2a:33:4b:ca:cb:c7:
         fc:3c:67:a0:5d:80:06:67:c1:62:d4:2f:81:45:e8:6f:0d:57:
         5c:56:47:84:b3:bd:33:44:d8:35:fc:83:de:be:b5:78:8a:f9:
         89:4e:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:34 2025 by rpki-client