Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa
File:                     d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa (raw, json)
Hash identifier:          uuUEKmH3rngkmeR9UXTTOR0gXybbrRsXr8gVj8OGRic=
Subject key identifier:   56:2B:22:4E:0A:DB:69:74:66:1D:61:06:DC:EA:96:EA:C2:5F:F2:49
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584910E17DCCFD0B47074137E0C0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     5065
IP address blocks:        208.123.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7d:cc:fd:0b:47:07:41:37:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=5f6334a0-fd44-4d1f-aab8-4f3ff26c3a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:0f:6a:0d:2c:14:04:f4:11:97:ad:1a:68:
                    78:83:bc:ea:0e:ad:fa:e9:bc:26:0b:92:09:18:11:
                    62:21:09:d6:6b:b7:3c:f7:fd:10:df:0a:e3:19:ea:
                    74:a4:e8:d2:32:5d:e1:12:a4:8e:b5:a5:6c:c6:ad:
                    fc:7f:e5:08:93:67:c8:bd:b1:77:62:06:36:a9:5a:
                    e9:0e:1e:32:9f:20:d4:d9:ee:71:65:b5:54:66:4c:
                    c8:97:d3:02:5d:a1:13:6f:f5:f3:2e:75:b8:f3:83:
                    d2:f9:3e:51:39:cf:d2:b8:5c:69:48:73:4b:dc:55:
                    6a:f7:62:d5:5a:78:da:22:3a:d0:14:1d:e5:3a:68:
                    a9:2e:c9:3b:c3:2f:c3:c3:6f:cc:20:a5:1a:b4:d0:
                    93:15:7f:54:58:c3:fe:7b:e3:9a:f0:18:dc:d4:b8:
                    9c:93:6b:7c:65:71:69:0a:71:da:c5:a5:dd:cd:c4:
                    29:d0:b9:ea:04:7d:e3:42:c3:34:9b:7e:6b:b6:57:
                    e0:69:32:69:a1:82:8e:7e:42:b3:74:0e:38:f0:13:
                    00:cc:e8:ac:b1:d9:9b:a8:a6:f6:bd:2c:ca:47:86:
                    1f:9d:f5:4b:47:88:21:9d:6c:af:7b:48:72:3e:99:
                    0b:61:db:62:21:22:e5:b1:60:7b:3c:8d:1c:a1:d8:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:22:4E:0A:DB:69:74:66:1D:61:06:DC:EA:96:EA:C2:5F:F2:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:92:ad:ac:c2:0c:64:44:31:ce:b4:33:53:75:44:cb:1a:
         02:5b:a5:01:79:22:4d:7a:3c:10:db:11:4e:c3:77:a6:2c:9c:
         df:38:e7:00:92:82:b6:67:67:34:0d:aa:cb:6a:6b:95:d8:5d:
         7e:0a:a6:ac:38:52:6b:e4:ec:77:89:2f:ad:42:b7:34:23:68:
         94:98:1a:4f:55:a7:6d:b8:b6:9e:9e:2b:c3:18:e5:74:4d:94:
         9c:b5:2e:63:71:09:36:1c:ea:d3:8e:0d:55:9e:d8:2c:32:d6:
         de:bf:2d:e6:e8:b7:12:92:bb:08:d1:05:75:32:1d:73:cb:c9:
         12:40:40:e7:cf:a6:14:99:34:b5:23:8a:c1:cd:e5:33:44:2e:
         c7:ab:3c:89:94:c4:0f:db:68:6b:6e:77:2e:93:d3:ae:2f:db:
         da:31:e3:6b:af:c5:c4:42:a2:a6:6f:91:4d:ef:e4:43:41:df:
         39:f0:d3:b3:05:5c:4d:92:85:fd:8e:36:2e:56:34:8b:93:87:
         3e:f2:44:a0:fc:d6:0f:36:c8:ff:b6:8b:fa:67:03:10:47:6c:
         e7:42:6c:ef:62:35:3f:a0:71:01:f0:81:2e:52:84:1b:f5:92:
         82:a3:b3:56:b5:65:cc:f4:a6:2c:1d:a5:a5:12:34:e8:73:05:
         ce:cb:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:48 2025 by rpki-client