Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eba598e-d88a-38c1-88a3-653f7e898959.roa
File:                     0eba598e-d88a-38c1-88a3-653f7e898959.roa (raw, json)
Hash identifier:          90VX+FzNKfgkajiXKn1qWYPUSdPUGQB0jFQq0G90yT0=
Subject key identifier:   99:07:0A:BB:A9:47:35:60:C8:B0:CC:6E:45:D5:69:9C:DF:FB:90:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00660C5A3AF36BEF5DA0200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eba598e-d88a-38c1-88a3-653f7e898959.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     17359
IP address blocks:        208.89.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:60:c5:a3:af:36:be:f5:da:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=687aaba4-3142-4954-b251-fd049095c008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:08:77:c3:0c:e0:7b:86:d6:7b:6b:82:9d:
                    22:ba:7a:b6:8d:7d:e0:2e:c4:4c:6c:92:25:26:aa:
                    ba:f9:c7:2e:ee:31:1b:18:b2:b3:50:1e:99:d4:7a:
                    0a:a4:cc:2c:e1:24:02:56:ad:91:56:be:f0:4c:b5:
                    a6:47:41:5f:60:40:31:9d:80:1d:4d:bb:1e:bc:3b:
                    5d:f0:ae:3f:98:47:76:6d:be:4c:9f:fb:52:10:cf:
                    6d:f2:38:cb:0d:0a:58:14:86:ca:bf:41:14:12:ac:
                    a6:9e:9f:39:fd:cb:f3:6c:c3:d8:20:b2:5d:44:49:
                    84:4a:33:4c:87:be:93:d7:ad:31:f7:a4:cb:9e:9a:
                    fb:37:f1:0c:a0:ea:f4:64:39:aa:b6:ef:c9:24:f0:
                    88:51:ee:86:1b:fe:4a:d9:03:8d:1f:3b:14:20:21:
                    9e:45:bb:ab:5d:b3:49:85:bc:df:78:89:0c:d2:01:
                    3b:71:a5:5d:0e:dd:62:ce:d6:57:61:ac:b2:83:f7:
                    81:62:48:2b:7d:3b:dd:1c:db:c1:31:82:09:b3:bc:
                    3c:06:c7:d3:54:4a:a2:f6:12:5b:d4:27:5a:3e:dd:
                    77:64:ba:fa:14:d8:1d:cb:0e:95:bc:88:33:67:3b:
                    91:e2:aa:51:6c:f5:92:7a:a4:d0:d3:92:ac:d9:f6:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:0A:BB:A9:47:35:60:C8:B0:CC:6E:45:D5:69:9C:DF:FB:90:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eba598e-d88a-38c1-88a3-653f7e898959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:70:12:bb:bd:52:8c:c8:4c:bb:05:fd:3a:b0:e0:f4:3f:de:
         ab:34:dd:94:d4:86:7e:6f:b4:76:9e:13:f8:c9:ec:f4:3c:06:
         de:c9:78:c4:46:8d:8d:b4:73:51:db:b5:f1:ac:ec:a2:ef:aa:
         fa:b3:c8:35:bb:b0:98:aa:36:03:e6:87:fc:fe:a5:b9:9b:c0:
         f4:75:31:b8:ad:d6:7e:08:b2:b4:fb:b4:2e:92:4c:9c:e4:27:
         cf:64:be:56:b6:20:c2:79:94:9f:f4:65:1b:c5:ea:50:ea:e3:
         7d:b7:98:41:6b:2b:c6:b9:21:d4:b5:52:9d:de:c7:a6:3b:5b:
         27:c2:9a:10:9e:d8:fa:df:f2:dd:16:9a:70:09:75:cf:7e:f1:
         7e:ec:0b:26:f1:a7:95:1c:80:e9:cb:d7:a0:fc:0a:bb:e2:a4:
         75:f4:1c:92:9a:0c:af:cc:0e:09:85:86:74:b7:26:b9:b7:b9:
         93:79:e0:bf:79:98:fa:40:c7:be:cd:cc:63:fc:e9:e5:50:c8:
         a2:3d:eb:ea:6c:e9:3d:0d:98:b1:fd:83:73:03:89:e4:36:58:
         e6:32:d9:58:90:40:18:f6:da:02:c0:d1:11:4f:ea:28:b6:9c:
         38:3b:72:87:7d:d2:a6:d3:00:70:97:c8:67:75:cf:02:88:eb:
         a1:4c:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:18 2025 by rpki-client