Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa
File:                     0d2c580c-ba11-3551-b662-e0e416396c1b.roa (raw, json)
Hash identifier:          WwpnTN7D8ZA+dgrNJofStes2/2vctU9CY3z2He0hKig=
Subject key identifier:   EA:E9:55:8C:DF:37:6F:38:6D:F3:AB:CC:CD:85:22:27:67:E6:E1:2C
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285848D0ABB4C35B4FB04878993A90
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     27370
IP address blocks:        140.241.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b4:c3:5b:4f:b0:48:78:99:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=ce404319-10b7-4ccd-aeba-ccc1e379fb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e4:24:29:7c:60:96:9d:2a:f7:c3:4e:6b:73:
                    c0:f9:e6:34:96:04:10:cf:34:c0:ca:cf:67:f5:23:
                    b9:69:fe:b8:fb:b5:36:0f:b9:10:9d:af:6c:39:25:
                    c7:30:a8:3d:b2:2b:8c:3a:f0:86:00:9b:c4:7e:f4:
                    ec:ab:e3:53:a4:2d:a2:55:50:d6:a7:05:5b:02:9c:
                    4f:82:4d:6f:b3:10:bc:19:af:84:44:e8:b7:11:9b:
                    41:19:75:14:d9:a1:4b:6a:14:1f:5a:c9:a9:24:21:
                    7e:84:ec:4e:e8:a0:ba:e6:09:fc:97:e9:e5:fe:fc:
                    06:05:ed:f8:98:0d:84:01:60:ce:3c:bd:5f:7e:31:
                    d4:85:0d:76:51:cd:f8:aa:1e:f9:24:07:57:29:8b:
                    3e:26:54:d0:fb:59:56:d9:68:60:d3:ed:48:18:38:
                    26:16:5c:38:6a:41:5f:67:42:9d:68:ae:b0:8b:78:
                    ec:41:47:45:c5:1a:41:76:27:c2:40:c5:2e:4b:dd:
                    00:50:65:95:75:00:a7:95:af:4e:29:72:7f:b8:3e:
                    f1:02:9f:b6:99:62:5a:39:8f:34:cd:7c:58:9c:ff:
                    db:a3:22:4f:87:5d:9c:78:07:cb:a4:72:69:94:7d:
                    59:4f:64:19:0d:0b:90:0e:2a:6b:7d:a1:82:d3:3c:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:55:8C:DF:37:6F:38:6D:F3:AB:CC:CD:85:22:27:67:E6:E1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:66:d6:c2:41:aa:13:b7:64:59:d6:00:25:99:68:37:ed:91:
         8b:d8:38:d8:53:bc:a5:7e:4e:3d:bc:66:de:68:d8:77:51:bd:
         a5:42:f8:f3:52:30:b1:e8:39:59:8b:13:60:94:c5:1e:99:3f:
         68:1c:f5:fd:1a:76:f5:76:c7:cc:34:53:78:07:76:c3:9d:b0:
         ad:42:5f:31:b7:e6:9a:f8:39:96:53:96:36:6b:4b:72:74:8a:
         ed:8c:2a:8d:d3:c7:e4:db:cf:ad:b8:d8:6c:d1:a9:9b:70:c8:
         48:c3:54:2b:2c:50:22:3a:5a:a4:38:7b:a3:62:13:e7:81:e6:
         46:9e:94:3a:e9:ae:aa:87:a4:6d:57:64:d5:a7:9f:5e:97:6a:
         c7:20:fe:c9:06:70:2e:0b:82:6e:a5:cc:b8:8d:9e:82:32:f9:
         d2:16:5b:d6:7d:04:bd:6e:a4:4f:d5:aa:4a:1e:69:25:96:e7:
         58:27:35:9f:2a:f9:84:bf:1b:12:fc:5d:cf:b7:f7:10:3d:be:
         79:6e:68:b8:67:6c:09:09:df:b2:cd:5a:32:71:8d:18:37:37:
         63:d2:da:4f:d7:20:5d:78:a6:34:68:8b:2c:79:cf:93:cd:78:
         9d:2a:aa:f4:e2:75:41:7a:2c:ae:e1:28:63:a3:83:cf:d4:39:
         80:ba:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:22 2025 by rpki-client