Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa
File:                     7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa (raw, json)
Hash identifier:          siGo0LqnKf3mzozTvNqEuhFQwB0e59khKj01uHPcwYw=
Subject key identifier:   5F:4B:40:0F:56:F4:F2:C7:39:98:C1:4C:9A:B5:E9:E9:80:C0:4F:AC
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848FBF12B8208A4E92CB8DA5800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     15164
IP address blocks:        209.71.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2b:82:08:a4:e9:2c:b8:da:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=4b9d7a08-a583-444c-8e61-bb171a6cb8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:e8:44:00:df:79:81:78:39:d4:9b:ef:9d:
                    0f:e9:b9:ed:71:aa:60:ff:73:3f:ec:9e:f3:bc:ae:
                    9f:0d:13:f9:13:c4:29:45:ef:84:af:ed:86:57:19:
                    e1:e9:3b:d2:a5:9c:1c:b3:51:0a:f4:8f:ef:e8:5e:
                    34:95:6c:00:94:a4:3e:ec:3a:28:9c:9d:eb:47:47:
                    8f:bc:d4:09:39:67:d0:62:d1:87:b2:18:82:d0:fd:
                    b3:5f:87:2c:ee:37:ab:d9:3b:83:bf:8e:f2:3c:70:
                    63:e0:4c:7b:d5:f6:a0:a3:c3:95:a1:bb:3c:fa:30:
                    fe:64:b8:2a:f2:12:47:08:5c:80:b7:29:96:08:53:
                    68:0f:a0:28:7a:8c:15:68:17:e3:69:d8:a1:d6:31:
                    98:93:1f:9c:2b:40:44:5f:a9:85:1a:3f:42:0e:7b:
                    3e:2f:1e:27:6a:7b:3d:15:a1:ce:65:f4:97:34:1c:
                    27:ad:53:f1:3a:b2:8f:df:e2:2e:0e:33:e2:54:d6:
                    72:2d:ad:b9:de:99:39:f0:dc:58:be:bc:03:e0:b7:
                    28:e1:41:cf:e7:ac:19:af:54:a8:2c:6b:59:d6:37:
                    56:63:07:b5:d6:34:2e:60:1c:b1:52:ad:9b:97:cf:
                    10:61:e3:c7:af:53:28:08:8f:4c:7b:26:fe:54:9a:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:40:0F:56:F4:F2:C7:39:98:C1:4C:9A:B5:E9:E9:80:C0:4F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:f6:67:b4:a1:53:80:59:87:9a:c2:a1:12:e0:b5:7d:e9:
         56:93:b2:2f:e4:f2:30:41:5d:13:57:f8:55:dc:ae:19:a7:54:
         93:8e:49:e9:5a:3d:8f:08:c4:8d:e1:44:62:1a:d8:aa:ea:c7:
         7f:1d:f0:15:8b:0f:23:0c:93:14:ef:e1:5a:1e:5c:88:ad:e1:
         6c:e5:a5:7f:3e:c0:22:5b:05:db:a4:4b:34:81:34:7b:9b:c8:
         9f:02:72:3d:c0:ec:8c:d5:ef:e6:6d:4c:b8:f5:dd:f7:98:3d:
         e4:81:c4:a0:be:0a:84:77:db:eb:e5:9e:fd:ca:16:a7:27:9a:
         3e:c9:5a:bf:59:d8:87:ba:c4:b3:f1:e5:d3:b7:7c:e7:c2:74:
         9c:0f:ff:eb:9a:4f:ab:05:e6:b1:00:e1:2c:32:f6:32:2f:6d:
         f2:1e:43:3a:0c:7a:79:8e:bf:5f:2c:45:52:eb:0f:6e:c3:22:
         9c:16:58:c4:e2:b6:79:5a:54:09:96:10:ca:4e:77:05:f1:23:
         fd:d5:19:a6:27:30:97:67:d5:98:2f:0d:94:ce:a1:8f:f7:cb:
         b2:82:b1:9f:3a:c1:ef:5f:9b:2e:60:51:bf:f9:e4:67:c0:1a:
         85:70:50:16:e6:22:d6:a7:91:6b:42:1b:5e:38:b0:8f:5f:2f:
         91:50:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:09 2025 by rpki-client