Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/3d33253d-f1e5-3113-8171-f540e678c87c.roa
File:                     3d33253d-f1e5-3113-8171-f540e678c87c.roa (raw, json)
Hash identifier:          SeNYicgVygNeVK3uWGuf9DSnT+u9HVLsfuuI7ZhgCUk=
Subject key identifier:   2F:FE:97:43:33:E1:F0:8C:78:DA:33:02:F9:C2:01:00:E7:70:1E:7E
Certificate issuer:       /CN=7a0faf4a-643d-4023-8090-81f838253675
Certificate serial:       010D0C9F4328584894A5E0884C8FE4C0F14A3F80
Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/3d33253d-f1e5-3113-8171-f540e678c87c.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     26214
IP address blocks:        137.83.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e0:88:4c:8f:e4:c0:f1:4a:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=1a8d59b5-cdb2-45c0-9c0c-71e6fd831c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:51:94:17:b4:4b:dc:79:62:37:24:95:dd:e5:
                    89:ba:67:ec:4b:4a:47:17:82:ff:33:2c:85:f2:56:
                    a9:77:79:51:cb:1b:dc:2a:86:28:78:aa:ca:d6:3e:
                    83:c7:b0:e0:19:ad:8a:a2:c8:54:8e:4e:ca:2c:70:
                    2c:37:f1:8d:b6:b1:f3:22:1c:16:ce:70:65:94:9f:
                    8d:d7:a4:a4:38:25:bd:d2:0a:56:6f:05:52:af:27:
                    a5:a7:77:1f:c7:c8:bf:5c:a8:86:d1:73:f5:e2:a7:
                    49:22:bf:bf:85:53:b3:7a:49:24:12:e3:3b:85:2f:
                    91:08:de:1d:6f:53:2b:4b:30:8d:f4:a8:9f:05:c6:
                    13:68:f1:c1:34:7b:9b:bb:04:a0:75:1e:86:2e:e6:
                    80:86:fb:12:e7:3b:38:af:07:3d:8b:47:de:d6:81:
                    01:ce:74:fe:48:ca:aa:f4:78:12:96:3b:a3:49:59:
                    a5:fe:cf:f7:82:44:47:73:bf:37:17:37:cf:41:da:
                    b7:9b:3c:c1:42:d6:e0:db:62:b2:80:aa:34:10:8d:
                    e9:07:99:0b:04:52:f7:8e:3f:55:30:46:33:d3:1a:
                    7f:d6:27:a3:df:c4:3f:8d:d5:9d:dd:13:06:3a:bc:
                    9e:d4:7e:e4:b5:7e:99:6d:aa:03:6a:8e:48:6e:a0:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FE:97:43:33:E1:F0:8C:78:DA:33:02:F9:C2:01:00:E7:70:1E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/3d33253d-f1e5-3113-8171-f540e678c87c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl

            X509v3 Authority Key Identifier:
                keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:3b:1d:b1:f2:9c:49:68:53:bc:7f:8f:bb:8e:05:11:20:
         be:76:48:90:3c:f5:1f:60:9f:90:6d:32:51:4b:40:20:5e:b0:
         c5:e5:fe:16:ac:9a:5f:b7:db:d7:de:0a:e4:d8:58:56:c0:a2:
         40:ff:56:7a:5d:bf:e3:cc:03:16:c5:15:df:b3:89:39:1d:ea:
         a0:1d:b2:67:5b:0c:4c:5e:da:52:ec:47:4f:24:f5:82:59:18:
         d8:56:ba:2c:68:56:d8:db:c8:fe:37:01:bb:bc:a9:80:6f:f2:
         2f:2e:9d:61:01:37:fc:3e:e5:ba:93:18:26:55:18:7b:c5:aa:
         34:9c:79:04:8b:0b:5e:23:0f:73:8c:f2:6e:13:12:09:cb:e5:
         35:49:61:4e:60:09:05:1f:04:42:a5:80:c9:07:70:95:2a:17:
         14:4d:25:f6:41:6b:7a:85:50:53:78:8f:39:0b:66:60:4b:ab:
         b5:a4:06:48:6d:11:2f:be:1a:97:c5:2e:b8:b6:53:4c:12:0b:
         79:6f:84:88:45:f8:94:24:98:2d:a8:06:58:45:f2:80:af:3e:
         f4:24:1c:5a:05:93:95:e8:d7:39:8a:37:27:c8:3f:d5:f3:43:
         be:bf:7a:98:0e:a6:c6:89:8f:e7:cb:cb:41:f1:10:f8:a0:51:
         93:9c:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:23 2025 by rpki-client