Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/b00bc285-a9bc-310e-8802-80a2c8063148.roa
File:                     b00bc285-a9bc-310e-8802-80a2c8063148.roa (raw, json)
Hash identifier:          JWqiLhKU8TIID3X3sABZFAY5yvuv3ocOdglxnOdefig=
Subject key identifier:   35:6D:8A:70:54:F6:F6:5F:C3:F0:50:81:83:F2:A2:6F:6F:F1:DD:07
Certificate issuer:       /CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
Certificate serial:       010D0C9F432858489BA0B0A30BB7BDBCD2F1CF28
Authority key identifier: 70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/b00bc285-a9bc-310e-8802-80a2c8063148.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     1820
IP address blocks:        185.38.210.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b0:a3:0b:b7:bd:bc:d2:f1:cf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=ed00f79c-70d6-43ac-8bcd-81b6d56500a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:e4:57:5a:c3:52:80:89:17:16:68:27:fe:
                    62:43:37:94:e4:aa:95:a1:a9:dc:54:f7:f5:83:57:
                    31:fc:3e:60:10:d2:e8:97:c8:4b:ed:38:cb:67:0f:
                    dd:93:19:b5:e0:dc:44:26:27:37:05:99:c8:69:d6:
                    d8:15:5d:5e:a9:64:82:1e:47:a5:f2:c2:68:a6:ae:
                    b4:8e:6b:2a:15:6e:dc:39:67:9f:00:86:1a:a7:df:
                    3f:86:45:c5:cc:4e:e2:9c:e8:bd:40:ce:b6:d5:85:
                    3d:a1:af:27:31:1e:eb:21:1f:17:fe:1a:7f:f4:2d:
                    a6:0b:12:ee:25:31:e6:52:26:c8:de:25:6a:bb:37:
                    49:c2:8f:7b:eb:fa:f4:23:8f:15:6e:02:ce:84:fe:
                    5b:04:15:a9:0e:b2:27:5c:89:2f:81:55:59:26:f8:
                    cf:96:b6:1f:44:e6:c2:f8:3b:c0:45:06:8d:34:84:
                    1c:d1:54:3c:a5:e8:69:ad:b8:85:31:90:42:fc:05:
                    7d:5e:9b:95:4f:f7:e5:79:7a:4b:97:f5:53:da:ea:
                    9e:f2:f9:88:5c:57:19:e1:a2:be:25:62:86:f1:7f:
                    e8:af:2a:05:89:56:ac:53:c7:0d:5a:5b:28:3e:c0:
                    90:d2:17:17:17:ee:03:45:53:2d:09:4a:6b:64:ee:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:8A:70:54:F6:F6:5F:C3:F0:50:81:83:F2:A2:6F:6F:F1:DD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/b00bc285-a9bc-310e-8802-80a2c8063148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.crl

            X509v3 Authority Key Identifier:
                keyid:70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:94:5a:df:28:02:00:a7:6a:f9:93:fc:6f:9b:ee:9c:7a:78:
         be:40:70:2a:7a:b9:0b:ee:1f:cf:d9:1c:ab:45:a1:34:93:94:
         60:ef:04:bd:35:65:a3:86:7b:a4:af:77:3c:35:b2:7c:20:19:
         8a:4a:55:80:56:1a:5a:ce:47:b2:42:1b:18:52:e4:bc:e9:ff:
         f1:28:70:06:a5:58:1e:5c:e5:88:3e:dc:dc:5c:e9:21:aa:74:
         c3:64:1f:76:67:a2:33:2d:ba:c9:db:6a:96:77:21:c4:f1:92:
         22:1d:1b:b4:da:1a:a6:7b:c9:cb:10:06:fa:96:b9:e8:1a:46:
         2a:4d:b3:ef:99:4d:f1:d6:e8:3f:1f:00:45:a9:0a:87:e6:6e:
         79:38:2d:9c:c6:00:8f:26:49:9e:2c:84:6c:e8:1f:38:3d:dd:
         bd:c4:f6:d2:16:48:20:5a:76:69:d4:35:45:d5:3a:dc:f9:9c:
         f4:9e:92:a2:c5:ba:cc:09:31:ae:78:22:e8:6f:7e:df:ed:36:
         02:0d:ee:49:37:de:7a:be:18:90:7c:59:b2:e3:c8:77:78:0e:
         80:dd:53:01:3d:54:db:51:72:3a:cf:b3:b2:e4:28:32:93:cd:
         55:67:30:9e:7a:72:85:d0:1e:5e:13:f7:42:e5:0a:00:da:70:
         67:77:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:01 2025 by rpki-client