Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
File:                     91a33a82-7a3f-380c-8092-58cb232957ba.roa (raw, json)
Hash identifier:          g6fotgY2pZgfRlqckQUeJ0ADVQCwqpdENxk4ErFqSIQ=
Subject key identifier:   A4:D2:D0:01:B4:69:F4:6D:AD:AE:C5:EE:BA:C7:1D:4B:73:77:C3:B1
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F43285849002155B37C9F4E134F184D80
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     6315
IP address blocks:        68.69.160.0/20 maxlen: 20
                          166.70.0.0/16 maxlen: 16
                          198.60.22.0/24 maxlen: 24
                          198.60.80.0/22 maxlen: 22
                          198.60.84.0/24 maxlen: 24
                          198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          199.104.120.0/21 maxlen: 21
                          204.107.178.0/24 maxlen: 24
                          204.228.128.0/19 maxlen: 19
                          207.135.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:55:b3:7c:9f:4e:13:4f:18:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=db8795b6-1ac2-41b1-8a0c-7f9ac252f51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:cc:15:f7:49:8d:08:c2:5d:b4:5c:a7:5c:
                    ea:3f:e2:d2:61:0c:6e:8f:bd:a7:3c:98:03:97:47:
                    f2:73:49:11:79:b2:f0:57:af:0d:28:d9:71:55:5b:
                    b9:a3:18:b4:c9:71:68:c0:3a:95:f9:14:3c:70:5b:
                    ca:e3:fd:60:1b:af:44:f5:27:85:9e:1b:5a:7a:fb:
                    e5:74:3e:44:a8:ab:cf:4b:d6:0a:0a:db:6b:4c:1c:
                    99:66:08:49:3b:68:40:6e:ea:36:25:19:14:23:78:
                    57:2a:b2:65:8a:4a:5e:99:13:59:75:b5:9d:13:58:
                    8d:25:40:bd:67:d3:13:cf:6c:0f:21:3a:42:cb:a7:
                    5b:96:19:6f:51:4d:9e:fc:14:c5:9d:00:60:84:4a:
                    00:fc:18:2f:b5:b6:5f:14:d9:97:71:9c:1b:12:1d:
                    fd:03:35:1f:b1:d0:de:d7:d9:6f:70:b7:94:88:bb:
                    18:61:31:a6:f3:51:de:a3:31:e7:45:58:85:a3:38:
                    c8:e7:d8:39:46:1c:1f:49:e2:b2:5e:ba:0b:de:5c:
                    1a:df:af:34:9f:63:1d:c4:23:94:0c:e9:a6:16:45:
                    29:4b:85:39:13:5a:ae:41:e2:88:3b:30:2e:e6:b3:
                    83:e1:5e:a9:5c:22:77:27:67:c5:2a:02:04:ca:aa:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:D0:01:B4:69:F4:6D:AD:AE:C5:EE:BA:C7:1D:4B:73:77:C3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.160.0/20
                  166.70.0.0/16
                  198.60.22.0/24
                  198.60.80.0-198.60.84.255
                  198.60.113.0-198.60.114.255
                  199.104.120.0/21
                  204.107.178.0/24
                  204.228.128.0/19
                  207.135.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:3f:d7:aa:3d:6a:1f:46:5a:23:94:e4:b7:5b:21:e8:31:4c:
         4b:48:83:78:85:74:f2:f9:87:87:da:c6:ca:0b:6a:23:e6:52:
         c2:7d:04:09:eb:89:67:21:13:93:e5:d1:c7:6a:7f:2f:5a:4a:
         8f:81:dc:d4:14:27:c8:94:a5:87:af:0d:c8:02:9d:f2:da:59:
         24:c1:b4:2e:0b:c3:ba:d4:c9:a5:a7:08:13:45:e1:98:be:f1:
         d5:c7:c3:fc:1f:18:29:ea:9f:88:cb:88:c6:97:74:4b:45:66:
         b8:b1:38:30:19:d0:c8:f2:3e:0e:66:f5:99:20:09:55:12:14:
         56:9f:0e:ac:c0:e1:f8:39:6c:71:a5:0a:e9:35:d5:b9:a6:1d:
         8a:9d:0c:a1:5d:4e:35:e2:73:41:e6:8c:f5:04:3a:12:22:7d:
         36:b0:1a:82:f7:83:50:68:4a:6a:d6:d5:c0:e6:3c:18:ea:02:
         08:27:21:ec:f4:61:85:03:91:50:3f:c8:5b:ad:04:f7:d3:97:
         62:2f:e7:55:d2:5e:c2:40:a1:b5:dd:a5:23:f3:37:c8:73:67:
         9f:e3:b0:7c:ec:5c:7d:cc:98:e4:bf:05:00:3a:2d:b0:c3:01:
         2b:14:51:26:7c:69:b0:d6:f8:76:fb:12:16:74:81:72:40:71:
         23:7c:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:52 2025 by rpki-client