Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/61100a13-42b7-30a2-a243-024a154a22af.roa
File:                     61100a13-42b7-30a2-a243-024a154a22af.roa (raw, json)
Hash identifier:          E8lSG1sAoTwQAu2Y/MXz0vlk9RetbjEG0H+j/1oDEKs=
Subject key identifier:   13:E0:C1:3C:A6:9F:7A:57:FC:BE:40:26:70:EB:FF:B2:4A:E7:06:8E
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584908A398A1F126D37CF0538180
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/61100a13-42b7-30a2-a243-024a154a22af.roa
Signing time:             Fri 28 Feb 2025 15:09:55 +0000
ROA not before:           Fri 28 Feb 2025 15:09:55 +0000
ROA not after:            Thu 29 May 2025 14:09:55 +0000
asID:                     13213
IP address blocks:        174.127.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:a3:98:a1:f1:26:d3:7c:f0:53:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb 28 15:09:55 2025 GMT
            Not After : May 29 14:09:55 2025 GMT
        Subject: CN=64bcd468-11c6-4f00-9ce8-41c4045e6bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:1b:f3:6f:fb:93:9a:82:96:d1:c9:df:6b:
                    0d:ad:60:9c:dc:8b:7f:c5:66:03:0d:99:36:7a:3f:
                    1d:bf:9d:56:e1:17:85:a6:4d:45:f0:d5:01:d7:97:
                    9c:be:f9:3f:66:37:fd:a3:e2:ef:9b:30:ab:3b:9d:
                    d2:93:38:11:a1:77:c3:bd:a6:cd:0a:b2:d1:64:d1:
                    77:a5:53:23:50:40:17:a7:26:53:52:bf:81:4c:11:
                    b6:cb:74:82:cd:e9:28:1f:93:97:32:81:46:9c:94:
                    d6:23:a5:73:2e:ad:b2:91:59:88:e9:9d:7c:60:a6:
                    23:8b:e3:f3:9a:09:06:80:66:97:f8:5d:54:c4:a2:
                    d5:2a:c7:e3:10:ff:f1:d6:1b:54:08:b6:35:22:de:
                    51:e5:55:f0:d8:85:17:b4:77:09:df:2c:67:1a:b4:
                    a4:a1:8e:d2:93:f4:e0:45:c0:b0:d6:a3:22:6c:12:
                    37:82:e8:8a:d9:be:87:45:52:58:f7:b3:a6:24:5a:
                    87:5e:f5:8c:21:f9:19:73:bc:86:5d:37:a8:f4:e8:
                    c5:5d:f4:e2:15:fb:44:0e:99:2f:b0:70:45:d7:ae:
                    22:df:e0:72:f3:4e:c4:34:08:9f:cd:e3:69:41:63:
                    07:17:b8:1e:ff:a3:38:87:db:2b:01:c3:52:5b:a9:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:C1:3C:A6:9F:7A:57:FC:BE:40:26:70:EB:FF:B2:4A:E7:06:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/61100a13-42b7-30a2-a243-024a154a22af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:4f:3f:11:cb:f4:e7:39:95:a7:49:17:ba:bb:bc:aa:79:
         e5:bd:6d:46:a8:62:15:23:af:e4:71:a1:88:06:0f:7c:c9:45:
         19:42:44:4f:14:3b:46:31:77:91:f5:06:12:a6:4c:e3:c6:55:
         72:41:86:3d:a8:74:44:8b:69:57:7c:0a:16:24:ca:ae:57:dd:
         09:ff:83:3c:41:42:dd:d5:b1:b7:0a:53:91:af:e0:3c:9b:31:
         31:44:45:82:52:f5:de:f6:44:37:e9:3f:c4:7a:8d:b1:2a:f6:
         b8:71:5f:57:aa:49:7f:db:50:d7:e1:e0:dc:be:e4:cd:f7:e1:
         d9:1a:57:99:02:c0:08:e9:fc:85:41:f1:ad:57:d9:aa:e3:01:
         2c:38:56:d1:5b:30:e3:7e:42:4b:20:5c:67:db:c4:da:04:e1:
         36:14:15:c5:00:f4:71:31:41:79:0d:6a:32:84:d9:84:46:3c:
         f8:a0:c1:46:b0:f6:8a:2b:d7:2c:52:e9:ff:2f:33:ba:a7:61:
         3d:79:8e:66:e0:e8:20:04:a1:f0:72:ee:56:65:fe:e7:4b:ec:
         3c:a3:15:3a:f2:3a:1c:a7:e9:91:89:66:ea:79:67:38:d8:ad:
         a4:6d:24:fa:ff:76:8a:72:44:bb:45:17:7e:32:4d:c7:53:21:
         62:02:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:00 2025 by rpki-client