Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/b826e1ca-515e-327d-8607-4699ed381d80.roa
File:                     b826e1ca-515e-327d-8607-4699ed381d80.roa (raw, json)
Hash identifier:          sYshJMDMAZmW3kw4i+ZXuEyQX41sq6PXqTmMVanUsVc=
Subject key identifier:   38:55:E5:15:2B:D4:7C:E9:F6:1E:9B:B1:98:60:EE:48:25:27:F0:D7
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F432858493ED3DA67939EB5B88BBC2AE0
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/b826e1ca-515e-327d-8607-4699ed381d80.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     12022
IP address blocks:        208.83.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:da:67:93:9e:b5:b8:8b:bc:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=0b789fb0-2c5a-4900-93f4-e7707c3fc30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:6c:89:45:f9:5f:35:08:96:2f:df:04:59:
                    a8:68:c7:ef:4d:25:4f:be:9d:f2:77:5c:b1:8d:eb:
                    6c:c2:d7:12:4e:e0:d3:da:3c:d2:7d:72:08:33:12:
                    20:3e:8e:5c:60:80:c3:07:43:ce:c7:ce:bf:c4:82:
                    62:1f:09:91:ff:80:e7:d0:ef:a5:7c:3f:dd:0b:74:
                    c4:af:d9:b8:90:c1:16:e2:06:92:29:5c:af:44:fb:
                    4d:0b:49:f8:63:f4:53:6f:8e:00:50:a0:4e:87:46:
                    d2:5a:f1:6a:67:77:85:c6:89:ea:49:a5:e7:db:18:
                    a7:61:28:c2:75:a9:d4:de:1f:cd:e8:fa:14:f1:d4:
                    7a:73:3f:b5:f6:29:92:45:74:16:a1:c6:95:55:17:
                    9e:7c:db:dc:89:f8:3e:c1:23:0d:68:3f:da:1e:74:
                    45:d0:e9:e7:31:53:69:d3:c1:39:6e:a7:ca:9d:10:
                    fc:d0:7b:57:fc:53:35:7f:be:ad:eb:8d:47:ff:2e:
                    70:64:55:83:b2:d7:82:41:d5:0c:78:aa:54:58:d1:
                    02:95:b7:98:4c:43:ad:0b:bf:40:bd:81:02:11:f7:
                    35:6e:a5:31:0f:df:e0:ce:f5:62:cb:a7:a2:2a:2b:
                    2a:08:cd:c5:8b:b2:8b:e9:d0:01:b4:e2:66:93:f7:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:E5:15:2B:D4:7C:E9:F6:1E:9B:B1:98:60:EE:48:25:27:F0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/b826e1ca-515e-327d-8607-4699ed381d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:05:21:d3:ee:0e:f0:2b:10:ad:41:cc:a3:6f:ad:17:2a:a4:
         ad:49:9b:0e:8f:b4:38:ad:90:9e:88:ec:45:57:d7:c7:b5:5d:
         10:20:71:f6:41:d9:40:be:67:9c:a3:55:4c:d1:af:a5:97:92:
         8c:fc:e6:ad:0b:1d:ab:ba:1b:6d:e2:b6:ff:ab:48:9a:38:f1:
         7e:2a:a8:1c:4e:b6:bd:16:46:c4:75:2f:ab:13:08:75:85:42:
         1e:62:05:71:2c:01:19:3a:bd:94:ff:8d:0a:b1:10:05:f4:42:
         d3:41:51:63:d9:2d:e7:c5:ce:e3:45:b2:13:66:a6:e9:62:a4:
         bf:5a:1a:7f:b9:91:89:db:cf:55:77:b4:7e:e5:38:bb:04:94:
         48:ec:6e:34:24:83:84:ca:3e:e3:9d:0b:3e:b4:42:5f:49:e6:
         95:03:de:0d:d8:ab:75:ef:ee:b8:c0:ca:47:fc:d6:25:b9:1e:
         15:3c:5e:29:a2:4d:ca:fe:21:fc:ef:0d:a7:19:1c:f8:f9:f6:
         1c:1b:c1:80:18:83:fa:61:10:c4:13:f5:e1:3c:33:b8:fe:43:
         f9:6b:c7:d1:ca:af:a4:89:b7:e7:b8:9f:70:0a:77:91:e5:9c:
         7b:78:06:5a:be:e2:a7:57:d6:c2:73:31:42:3a:bd:d2:68:31:
         e9:89:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:55 2025 by rpki-client