Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08186710-473b-3a09-8778-58f695f21fc0.roa
File:                     08186710-473b-3a09-8778-58f695f21fc0.roa (raw, json)
Hash identifier:          g5aW8b+kuYwQhl/3a8B4gjY69IwqHkrMZrqjldY+5p0=
Subject key identifier:   CE:E2:B3:13:D1:C4:B2:93:0F:8C:21:3F:C4:CC:EA:02:41:A8:2F:98
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B62616E7E230A1F17F82ED80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08186710-473b-3a09-8778-58f695f21fc0.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.102.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:16:e7:e2:30:a1:f1:7f:82:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=d1f4a87c-68c3-40ff-a112-abf7add65c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:b6:0a:f6:ae:e7:09:6e:48:47:b2:a4:33:
                    12:b2:c0:d2:74:45:04:a8:56:be:cc:7d:dd:2c:91:
                    44:8e:99:5a:a5:99:da:e9:ac:2d:eb:ea:27:2d:75:
                    cc:17:8c:c7:c0:36:3c:0f:e2:62:22:e2:b0:4d:13:
                    9e:66:16:b0:c7:4b:d7:3e:ed:b7:79:20:28:b0:d0:
                    74:a8:6a:48:70:ce:2a:d1:f9:c7:01:94:f2:2a:8e:
                    65:0f:7d:a8:a5:c0:af:c3:47:33:9e:8d:71:36:fb:
                    a2:1e:f0:a8:38:ce:c0:4c:c5:04:83:c8:71:0a:5b:
                    78:87:f7:8c:f9:27:06:11:79:cb:1b:c0:73:af:18:
                    c0:c2:78:4f:39:15:f2:38:0e:7a:16:60:8c:de:2c:
                    75:27:62:ce:2e:d9:06:aa:d1:b5:79:96:76:f7:92:
                    e6:b4:ed:1b:90:df:bb:c6:95:c0:40:eb:09:6c:16:
                    c3:a5:bc:42:80:f4:00:ed:79:0e:7b:1f:f1:5e:d1:
                    76:6a:56:12:6b:36:8a:83:c2:54:e9:16:11:ff:e5:
                    76:e5:28:c1:4a:f7:5a:7e:3e:5d:4b:9e:13:9d:ea:
                    6e:d4:58:c7:3f:22:9f:93:08:76:6d:67:47:c6:62:
                    b7:63:81:19:d1:c3:4a:17:a4:66:80:0e:bc:63:15:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:B3:13:D1:C4:B2:93:0F:8C:21:3F:C4:CC:EA:02:41:A8:2F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08186710-473b-3a09-8778-58f695f21fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f6:22:c8:5b:e3:d8:94:8b:82:8c:ca:c1:ee:df:fb:07:54:
         e6:7e:5b:7d:67:be:34:78:56:8f:13:b3:ad:8c:4d:9d:40:a5:
         7a:d4:11:86:8b:5d:f6:43:82:5e:44:64:92:a6:d1:a6:37:f8:
         43:f2:d7:75:51:92:5f:86:05:3b:ad:eb:7a:04:41:ff:59:f8:
         0d:7d:65:a5:2a:88:d9:da:51:12:3d:86:81:82:81:a3:e3:34:
         9a:fb:b1:53:f6:08:ae:b9:39:01:41:dd:ab:6a:d3:f0:7f:3e:
         ab:46:ce:60:eb:cd:73:a8:90:f6:0a:69:22:49:73:51:0f:20:
         c3:90:ec:4e:53:9a:7e:4f:d9:00:44:f1:f3:cb:07:c3:45:3c:
         13:d4:81:57:55:69:dd:2b:b0:53:91:67:d2:6c:9e:dd:ae:53:
         47:f3:6a:59:9a:76:56:0a:ea:55:f4:e4:f8:a6:e3:de:86:5f:
         19:2d:39:85:d9:01:4a:66:3d:95:03:26:90:15:de:89:3c:4f:
         a4:60:b5:4a:41:3f:49:2a:39:b3:d6:11:1a:77:e9:48:ff:34:
         0f:48:48:3b:d4:71:8e:cb:4f:e1:9c:d8:c5:23:ce:b1:be:aa:
         87:64:97:65:7f:e7:a5:10:72:7e:ee:87:ac:90:6b:2a:26:57:
         83:32:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:38 2025 by rpki-client