Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
File:                     c844993d-f4dd-313b-b5c9-8354c562e673.roa (raw, json)
Hash identifier:          Mm7e4+81z8u7StrH9RuwLVGNiEdCNcrxJpDMq/8CLH0=
Subject key identifier:   C6:88:6E:73:95:48:DF:37:9E:57:06:57:2A:A6:19:D5:A3:70:B7:DA
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F432858490E16CA74069BCE97BA823B00
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     22925
IP address blocks:        107.181.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:ca:74:06:9b:ce:97:ba:82:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=8c8a1d45-2423-472f-8a55-47e949f5ef71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:03:e4:ee:2d:dd:8b:01:9d:f0:33:f2:fe:
                    ac:63:3b:b5:e5:cb:26:9d:82:2a:6a:be:2d:1a:b5:
                    3b:ca:99:74:5c:84:a5:07:78:cf:e3:2f:0d:4b:3d:
                    29:4d:a8:e2:3c:81:5f:1b:86:9d:ed:2a:87:11:87:
                    d1:d2:da:dc:e2:1b:4c:78:a5:0f:5e:cd:14:6c:fd:
                    49:41:4a:f5:29:7e:20:49:37:aa:c6:19:df:15:6a:
                    15:b9:b2:53:5f:59:73:d6:ed:2f:9e:ed:a4:b6:5c:
                    88:84:90:81:c5:cb:6b:59:db:ed:54:87:27:35:bb:
                    60:d0:3d:03:b4:70:c5:5e:b6:7a:89:d1:5a:de:61:
                    29:7d:c8:34:e2:8a:b5:43:45:2f:35:82:bf:f9:63:
                    50:a6:63:e7:c1:fe:da:20:7d:d7:7f:5a:26:ec:08:
                    b7:3e:52:60:b4:6b:d3:75:ea:33:13:9f:7e:cf:f6:
                    83:f0:de:d8:7a:66:f9:ed:7d:51:aa:58:ae:be:7d:
                    40:34:04:16:4b:73:8e:63:d3:0b:1c:a5:0e:7a:53:
                    d2:90:b0:fe:c8:19:fa:f4:0d:38:11:c8:f5:7d:79:
                    7c:0c:69:67:e3:42:68:a0:44:0c:25:d8:13:b5:8a:
                    cb:c8:75:5c:c8:65:b3:7b:41:41:4f:80:3f:63:26:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:6E:73:95:48:DF:37:9E:57:06:57:2A:A6:19:D5:A3:70:B7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:57:fd:f4:fd:df:fe:fd:a5:9c:da:44:fa:0f:f5:1c:27:
         b8:a9:c1:b6:6a:d4:a6:ae:e7:65:7a:df:42:a3:cf:e6:b0:f8:
         89:e1:bb:6c:49:41:36:99:90:4c:3a:b6:3c:b9:8d:0a:bb:56:
         b5:e6:1b:54:03:ef:42:2f:8c:a7:73:2d:55:37:6d:8f:66:40:
         53:ff:5b:f6:3d:cf:10:51:4b:9e:e5:89:58:39:f4:52:90:08:
         cd:66:ee:df:39:43:44:a6:7e:e7:95:46:ad:87:b5:7e:c6:3c:
         95:0d:47:5f:35:57:28:75:fd:07:1b:82:70:39:bc:89:a5:1f:
         40:e2:ee:ae:86:2b:c6:21:1e:34:80:fb:21:5c:e8:7b:dc:d6:
         3c:18:e4:32:76:fb:4c:a3:dd:0c:9c:de:43:99:86:c0:37:3d:
         e6:64:6c:e3:f4:bb:82:c8:c6:93:cf:1b:98:43:53:42:6f:84:
         64:78:e9:10:a0:8f:56:07:4e:74:a2:fb:ae:9d:6d:66:c6:b8:
         fb:92:21:d4:1b:96:2f:f6:53:ec:49:7e:9d:fc:40:c1:8e:fc:
         11:ad:e9:59:57:4b:73:ab:05:76:ec:24:4c:63:43:0e:7e:23:
         c3:d8:47:ba:60:c8:dc:25:c3:09:8d:41:88:4e:57:be:a5:8b:
         31:2a:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:39 2025 by rpki-client