Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4ffacb7-1121-32ac-8e26-64b2a9d87a1a.roa
File:                     e4ffacb7-1121-32ac-8e26-64b2a9d87a1a.roa (raw, json)
Hash identifier:          1mF1ERh9eJesq4K9Fw0696xHvR4UIYGMgyq1pV0s5n8=
Subject key identifier:   EB:73:5F:6C:09:29:99:AC:24:08:B0:5B:C8:1F:D6:E2:02:5E:DB:72
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837C0AB0E68755097E1AA55CB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4ffacb7-1121-32ac-8e26-64b2a9d87a1a.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     15247
IP address blocks:        209.53.170.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:c0:ab:0e:68:75:50:97:e1:aa:55:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=38778aeb-c85a-4dd6-9d78-08f6d2b203c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:92:4c:1b:ff:3c:50:98:66:ec:5b:bb:64:
                    64:aa:15:65:65:78:81:27:86:0a:17:3d:a7:fb:95:
                    52:80:33:7d:c1:8c:21:14:0c:ff:bd:9c:79:28:bd:
                    f8:89:cb:75:e4:a8:77:5e:d1:cd:f6:e2:1c:57:dd:
                    7b:b5:49:8f:fd:ef:b4:9c:37:7b:b9:f5:4e:93:78:
                    85:bf:c5:0d:e3:1e:20:bd:5c:dd:88:da:01:71:e8:
                    56:41:9f:4e:81:96:42:11:3f:f0:6b:1e:4f:97:a3:
                    50:1f:6a:28:dc:3e:40:ea:d8:90:7e:cd:db:52:01:
                    1f:43:bb:fb:70:7b:ea:05:f3:74:6a:c2:8a:7a:1d:
                    98:74:f2:51:44:b0:c4:2f:9a:95:07:ea:53:6e:4c:
                    7c:0e:bd:ec:1d:7a:b6:58:b1:af:28:98:14:cd:58:
                    27:da:d0:eb:71:fe:88:a7:75:ff:71:10:4f:63:40:
                    01:4d:16:35:32:ee:78:c0:d9:73:f4:e9:6f:04:39:
                    76:c1:fc:3a:0f:e1:cb:d0:2e:3e:f1:d2:dd:6b:3e:
                    49:b2:3e:10:49:04:75:e0:e8:65:b0:cd:cc:85:a7:
                    ae:1f:61:7b:bd:59:61:49:ac:7a:d0:a1:49:e7:b5:
                    0c:79:b2:91:78:8b:9d:a3:96:74:84:6d:59:4a:f2:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:73:5F:6C:09:29:99:AC:24:08:B0:5B:C8:1F:D6:E2:02:5E:DB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4ffacb7-1121-32ac-8e26-64b2a9d87a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6f:84:b2:15:00:de:07:cd:eb:3c:04:10:91:9d:72:34:c6:
         46:ba:5e:40:42:42:c6:dc:eb:fe:43:7d:ed:53:c7:d2:69:33:
         df:1d:37:78:09:4f:f1:95:fb:d6:84:95:9e:0d:ab:f4:57:f7:
         27:51:e2:fd:fd:dd:b5:d8:1f:04:a5:dc:1e:74:66:81:ee:87:
         e8:b9:04:d4:90:38:01:eb:75:d9:75:cb:20:5a:09:ee:78:87:
         1e:9a:e4:5d:3c:e4:3e:da:2f:41:0b:e3:92:72:3f:ca:1d:5e:
         ab:ef:6a:9b:7c:19:e0:0d:d3:03:b7:25:13:5d:c6:dd:a8:e7:
         e6:42:df:f7:48:9a:b6:bd:a9:1b:85:47:b2:ec:d9:59:42:56:
         69:cb:d4:53:18:01:2d:16:35:0a:36:cb:78:93:1c:96:0a:9b:
         0e:0c:cc:fe:72:10:1f:08:27:de:6f:19:e3:0c:70:bf:02:fc:
         0d:e6:aa:b3:05:00:d7:a4:50:25:b1:0f:82:b8:50:50:84:46:
         19:eb:7e:4f:f5:52:7c:92:79:b2:54:0d:c5:a6:b5:4d:6b:f1:
         f1:34:d3:69:e9:61:1e:43:9e:2b:2c:cb:c5:26:87:90:79:2e:
         0d:db:22:a8:82:34:4e:e8:c9:8f:42:ff:e9:d8:2a:56:0f:2b:
         9f:77:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:29 2025 by rpki-client