Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa
File:                     702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa (raw, json)
Hash identifier:          6Zb30BFCx2yJZXxd1eZwyFkrqAtGU30TYGVZk73K32o=
Subject key identifier:   4D:F1:57:FC:73:53:9C:E2:28:A3:6E:8D:E9:6D:0B:F1:11:37:18:16
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858494B640E9643BC735C2FC10040
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     396204
IP address blocks:        205.143.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0e:96:43:bc:73:5c:2f:c1:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=93c36f45-ea88-45c8-bf54-b8077890b438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:1e:a5:55:88:f5:42:93:21:ac:24:37:f4:
                    74:a7:55:46:2a:0b:1c:8e:da:f9:de:c6:7c:b9:54:
                    11:f3:d0:8f:d6:ad:f5:96:c7:01:9d:ec:6b:c6:cc:
                    f1:02:8b:6d:80:51:94:ef:68:2f:d1:13:e0:12:3b:
                    0d:cb:e5:c2:2a:43:53:59:16:24:6b:f9:06:f2:ed:
                    2e:da:94:50:9c:20:a6:1d:72:b6:65:d7:8f:d2:99:
                    2f:da:53:78:a7:9d:4f:5a:f9:29:13:9a:09:19:69:
                    48:7c:07:df:7a:9d:54:53:7c:6f:92:d8:2d:9a:14:
                    15:3f:bb:7e:4e:db:59:c1:a3:74:1d:14:0f:42:63:
                    f9:aa:d9:69:6b:7c:68:15:e1:4d:64:9f:2e:59:e6:
                    40:28:14:1a:76:15:ac:81:dc:fe:b5:8b:07:29:43:
                    e5:5e:79:05:23:51:97:7c:96:54:5d:cf:60:e5:a2:
                    b6:1c:23:30:87:79:09:5a:62:06:80:b1:bd:5c:9a:
                    6b:ae:d7:8e:67:6e:25:2b:ad:46:be:19:9a:b1:60:
                    dc:94:51:3b:49:18:8b:a5:f4:55:a4:38:b7:7a:58:
                    c9:26:f3:13:b3:2a:89:de:2a:71:85:c2:da:7d:27:
                    a6:14:21:fd:1e:ea:9a:a3:72:94:8f:1a:bb:99:81:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:57:FC:73:53:9C:E2:28:A3:6E:8D:E9:6D:0B:F1:11:37:18:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:70:53:8e:17:04:7d:0e:03:73:49:6e:88:e1:85:8a:45:6c:
         80:ae:04:d6:a1:df:e4:26:44:e4:f0:bc:a3:51:1f:f2:41:7f:
         ac:6f:70:62:da:e1:19:93:05:96:5f:eb:1c:f1:17:0c:53:37:
         d2:36:6c:80:a4:1d:49:17:9a:6f:13:d1:16:1c:6c:5a:4f:9d:
         ab:c8:cf:9a:bd:18:a7:5b:4d:31:39:02:a0:d7:c0:9f:22:21:
         18:7a:a5:7e:35:45:5d:02:fa:c1:65:2e:d8:89:86:61:e9:61:
         e7:dc:ef:44:91:a0:34:2c:02:36:67:c9:ed:c2:f2:f9:94:66:
         62:49:65:31:d4:47:91:ad:32:46:bf:fb:c1:63:5f:f6:3f:39:
         e7:30:4d:a8:ee:0b:c1:83:3e:4d:fb:8d:19:4b:34:ac:53:60:
         c0:c3:03:fb:63:38:c2:31:28:7b:48:e2:44:5f:05:16:91:1b:
         15:9d:44:c3:f4:d8:b1:97:0c:4d:12:ae:f2:54:90:c5:ec:d6:
         5d:4c:83:60:b0:53:f0:c3:f7:da:f3:8c:df:a3:6f:e6:60:6c:
         02:76:a1:8b:3a:a1:d5:e5:6f:a0:b7:a1:a8:28:7a:31:57:ee:
         8d:91:09:fd:a3:31:1d:b7:8a:af:7c:dd:6b:3a:9a:6a:ab:6f:
         49:66:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:10 2025 by rpki-client