Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
File:                     7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa (raw, json)
Hash identifier:          SV/q4jVCMNoddSX1PW2ogjCntqnJNTVlnYJLqe0NAEk=
Subject key identifier:   E7:4A:55:DE:2D:42:A0:E7:80:66:71:68:0E:24:36:9F:AC:39:3F:76
Certificate issuer:       /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial:       010D0C9F432858493C0922D748CB5C557871E260
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        203.96.187.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:22:d7:48:cb:5c:55:78:71:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=6d9a7b41-2d73-4de9-b97e-2d366699b89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:57:a0:0b:da:b9:90:8b:f2:15:46:d7:bb:
                    cf:06:21:b0:5d:69:06:72:5f:04:b5:c7:1e:25:c3:
                    d0:14:74:f5:cc:d5:c1:39:20:7b:db:c1:a8:3a:7f:
                    60:8f:4a:f6:d2:99:6c:9c:3d:d1:e5:1a:13:02:8e:
                    61:39:c9:ed:17:c7:be:81:eb:60:3e:5e:ea:f2:8d:
                    c0:4f:0a:7e:74:00:b1:7b:22:48:ce:a5:47:ca:a7:
                    6d:e2:67:c1:cd:0b:68:03:07:ab:2f:da:8f:18:a7:
                    dd:40:d2:40:5e:49:18:81:9e:8a:9c:77:57:f9:db:
                    46:ca:e0:9c:36:36:0f:71:c4:88:6d:6e:7d:00:19:
                    50:68:41:07:99:7a:44:99:89:6b:dc:3d:e5:23:a9:
                    e7:74:2d:a0:e5:30:f4:52:2e:18:de:fb:cf:ef:14:
                    20:29:47:77:cc:ea:fb:91:bc:f8:d1:a2:bf:03:e3:
                    6a:ba:b0:d1:da:4d:61:f5:39:03:53:33:6e:85:00:
                    b9:b6:24:64:14:e1:a0:2a:35:2a:b8:70:f3:a4:ee:
                    51:f0:75:b2:57:69:13:af:ae:42:de:00:7b:37:22:
                    97:1f:fd:4a:c2:34:7c:b1:5e:4e:2c:8e:25:72:59:
                    8f:08:44:dd:48:c6:27:fc:fb:3a:42:f0:62:3a:05:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:55:DE:2D:42:A0:E7:80:66:71:68:0E:24:36:9F:AC:39:3F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl

            X509v3 Authority Key Identifier:
                keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:a5:4e:b4:aa:2d:23:d8:02:94:1a:38:af:61:b7:7e:75:
         f6:48:7e:9e:b1:c3:6e:0c:d5:04:24:3b:1b:db:b2:c9:62:cf:
         c9:20:95:50:d0:52:28:07:75:95:28:7d:2c:62:a8:6d:25:ca:
         50:b3:7f:a8:69:ab:88:d1:41:ef:cd:b6:62:d0:e2:a8:6e:75:
         bd:11:87:2b:62:6a:27:86:45:d5:49:f1:f5:10:5a:16:85:00:
         8b:93:73:44:64:18:7e:94:bd:6e:00:f3:de:87:94:51:11:7b:
         91:7f:0c:a3:34:4d:6c:b5:1b:c8:19:67:d5:1e:69:87:e1:96:
         5a:f0:d4:08:45:79:1d:12:c1:81:43:6f:91:5f:63:c5:fd:96:
         9f:9e:3b:57:80:87:53:3c:95:da:f4:7a:23:ed:47:4b:16:2a:
         74:4e:19:73:9c:ec:c2:e6:0a:3e:db:ab:1e:1c:2a:74:96:30:
         f9:66:ad:fa:cd:bc:06:6f:f4:c0:c5:33:11:28:f4:02:c0:e6:
         79:f0:b6:1d:db:02:cf:0d:b0:75:50:61:a7:d7:ef:db:a5:2f:
         79:c4:c3:90:e1:9a:36:2d:7f:14:a4:f3:a3:0a:3b:bd:a9:67:
         89:a8:1a:ba:04:b7:aa:41:9f:b9:9c:3e:7d:ec:df:3e:bd:92:
         02:b2:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:38 2025 by rpki-client