Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/371092d8-f49e-3eac-a1e8-ba2864f85649.roa
File:                     371092d8-f49e-3eac-a1e8-ba2864f85649.roa (raw, json)
Hash identifier:          IEnCRBztcdNqhtdgYlCC0Wh3R73XwNh8gvmlOcz3joE=
Subject key identifier:   D4:50:90:FD:D1:CF:B4:CE:52:35:54:6C:A2:5E:5F:6B:AC:E1:4D:F0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858486C2B05415494E45AB15986C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/371092d8-f49e-3eac-a1e8-ba2864f85649.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     13332
IP address blocks:        67.227.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:05:41:54:94:e4:5a:b1:59:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=e97cf879-3f19-4f66-9d79-25c62ade988a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:bd:ec:f3:9f:1b:0d:c0:35:87:fd:82:15:
                    0f:80:34:40:7f:62:05:3b:ed:46:21:18:c2:7d:7c:
                    85:d2:31:a5:2d:49:15:9f:6f:83:97:14:0d:1e:dd:
                    f4:4c:32:5f:9e:f8:7d:54:4b:b9:cc:0f:2d:60:4e:
                    a4:24:39:4f:63:75:65:63:2c:ee:a5:a2:23:e2:69:
                    33:3d:43:29:e5:0c:3d:6e:ee:6d:a5:76:4f:7d:2b:
                    97:47:46:db:bf:71:65:8b:e5:dd:e2:98:41:fb:29:
                    48:4b:3d:00:df:56:39:39:77:de:73:56:0c:3e:40:
                    70:12:37:93:45:44:9f:a3:26:ec:d8:05:b1:11:5f:
                    e2:44:97:78:6e:77:88:ee:4d:89:6d:26:36:23:c8:
                    c1:4b:d7:d1:69:8e:c7:6c:f6:66:0e:7b:e0:b9:d9:
                    cc:e2:77:df:10:37:e9:ee:85:f2:eb:2e:19:1e:fc:
                    40:00:e8:84:4a:5e:02:ff:eb:8d:c3:08:3f:20:f5:
                    b8:57:ee:95:f3:11:64:bf:78:37:16:ca:41:44:3d:
                    58:63:e9:60:9a:03:75:24:1d:be:06:c1:25:2c:40:
                    cf:c4:dd:df:bf:a1:59:7c:51:19:7f:37:77:e7:77:
                    ce:4d:78:89:ce:0f:01:d7:0d:bc:c3:8a:29:1d:09:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:50:90:FD:D1:CF:B4:CE:52:35:54:6C:A2:5E:5F:6B:AC:E1:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/371092d8-f49e-3eac-a1e8-ba2864f85649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:af:fd:4a:59:1e:6a:5d:79:c8:54:b5:2e:6f:62:30:a4:
         16:cb:4e:37:d2:ba:91:4d:32:78:2a:b6:b8:6d:d3:97:5e:0b:
         49:59:35:0f:11:36:e9:36:93:59:78:ef:54:d4:c9:8e:08:30:
         23:88:7f:d4:90:8c:2d:9a:f4:58:7d:bd:f7:63:52:2e:f8:23:
         0f:16:06:e9:2c:e6:3f:4b:6d:d7:9b:f2:8d:de:63:ec:19:bd:
         12:03:18:ed:a0:db:a2:01:9c:63:d8:72:37:34:27:06:67:17:
         78:4f:cd:e1:26:d3:e8:d9:6f:1a:8d:95:d8:6d:f1:e0:3e:26:
         0f:54:93:33:f4:2b:6f:2d:a4:4e:59:b9:63:5a:26:a3:0b:7c:
         e6:a8:64:b4:29:02:74:78:0d:d7:17:9a:02:e3:4a:a5:1d:4c:
         3a:03:dd:00:01:1d:ec:90:0c:5f:f1:48:6a:e0:7c:1d:5d:78:
         cb:6a:43:aa:fc:fc:76:1b:30:d3:ba:ff:5e:f5:ec:2c:6e:33:
         f2:13:53:74:97:98:93:f5:ed:33:ee:9f:d5:c4:63:68:07:4c:
         bb:4f:d0:21:73:6f:47:a2:8c:f0:82:86:f1:bc:84:42:da:ca:
         01:40:8b:32:77:9e:0a:49:0e:47:85:43:66:c1:1a:c7:fb:21:
         59:7b:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 20:56:18 2025 by rpki-client