Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/3182e4c8-9fcf-3327-b670-baa3c8d1b80b.roa
File:                     3182e4c8-9fcf-3327-b670-baa3c8d1b80b.roa (raw, json)
Hash identifier:          tzK3zUUvVwHQ6j27EdLxiIqM5Rla9BqK+83OqLOZ4eY=
Subject key identifier:   51:18:FA:62:54:B3:C6:0C:C9:1B:B8:A5:E0:0E:5D:DC:4D:15:5D:A1
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF615335A87D113612B24740
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/3182e4c8-9fcf-3327-b670-baa3c8d1b80b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     17157
IP address blocks:        207.230.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:35:a8:7d:11:36:12:b2:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=6919167d-68a6-47d3-b50d-7d93e1a68ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:36:d6:35:ae:34:f1:65:cf:45:34:03:68:
                    20:94:bd:14:30:fb:4d:aa:ce:99:65:92:3a:0e:73:
                    7f:ea:d4:00:fd:2e:fd:fa:93:94:42:b3:df:bc:1a:
                    b3:32:9c:40:69:a6:ec:88:7c:47:bb:a2:b5:7e:95:
                    21:7e:4e:a1:fd:dd:26:12:3f:f1:0c:39:82:30:a4:
                    38:fc:fb:45:05:8a:9c:53:26:ed:f1:4e:09:02:53:
                    c5:44:b9:9d:bf:32:15:b7:6d:11:25:43:70:4b:ac:
                    72:8c:cb:2f:22:c7:fa:ca:e0:cb:f6:bd:b5:df:01:
                    dc:2e:65:55:2f:23:71:97:9c:54:b5:28:c4:fe:26:
                    9d:22:53:f3:6d:90:48:2c:16:c1:69:9f:ce:2b:28:
                    d3:6e:78:05:34:c7:10:ce:9e:90:9b:78:3a:a2:05:
                    f8:28:aa:26:27:d7:25:d4:c3:39:7f:92:1c:10:16:
                    a7:84:fd:99:87:e3:b9:03:93:e2:41:cc:bf:77:27:
                    36:fd:75:8c:3f:34:80:93:82:67:8c:bd:94:f0:71:
                    44:9d:03:e0:b4:02:4a:01:77:b0:a1:2a:9b:af:ee:
                    e4:50:1b:93:19:cb:78:55:97:c4:4a:ca:1b:2a:ff:
                    64:ea:20:cd:0c:68:3f:c6:04:f4:5a:07:c6:44:25:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:18:FA:62:54:B3:C6:0C:C9:1B:B8:A5:E0:0E:5D:DC:4D:15:5D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/3182e4c8-9fcf-3327-b670-baa3c8d1b80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:f9:ad:55:13:87:79:8e:25:fa:01:cf:ca:73:a3:79:3b:
         c0:66:71:30:d3:0b:48:41:48:14:eb:dd:b2:39:c8:ff:98:0d:
         2c:08:15:48:07:22:5c:4f:ee:41:d9:1d:0c:15:51:f7:0e:3a:
         02:31:19:7f:82:2a:2b:be:11:c4:3f:55:cd:5b:05:51:38:69:
         43:f2:61:0f:22:48:1d:39:9f:5e:e1:0a:5b:d5:1b:af:11:da:
         ef:0e:f2:f3:78:e3:03:37:04:64:c4:33:78:0c:4c:e2:23:6b:
         43:f6:e7:2f:92:72:a5:8b:08:74:45:b6:d5:26:b9:86:6e:be:
         a5:05:a6:e1:ba:9d:00:47:b1:dd:43:12:5b:ff:1b:3e:d2:cd:
         8a:c0:79:8b:29:b6:6c:e0:58:c1:ec:ec:e0:8e:d5:1e:c3:7f:
         84:b6:89:39:0b:06:57:7d:3d:c8:6f:d9:5e:ad:3b:f7:b4:80:
         29:98:2f:30:ba:a1:8f:b8:9c:38:6a:bb:0c:b2:92:0f:0b:7a:
         a5:8d:be:63:63:ed:f2:93:02:f2:3e:fe:6f:c5:86:e8:8d:0d:
         9c:69:5e:49:2d:4f:d1:27:8e:31:ff:44:85:0d:71:19:40:13:
         c1:9c:7c:b1:cb:28:19:af:04:d2:e7:87:b8:ac:9b:92:5c:39:
         3d:04:0b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:53 2025 by rpki-client