Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          NJs2xMIhzTH3D7mT6fxGSTh/dy7TYSf8J21IUVa7BUU=
Subject key identifier:   03:C6:D1:99:EB:56:88:22:B1:53:E5:84:9D:69:F7:F9:79:4D:05:2C
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F43285848F22C6EE7346A799FE43EBAC0
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6e:e7:34:6a:79:9f:e4:3e:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=a688059e-0ac4-409d-8545-55a16689a8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:9b:d9:c2:ad:31:6f:3c:19:f6:e7:c9:6e:
                    0b:68:4b:e5:3c:83:f3:e3:b1:dc:80:75:9b:f0:25:
                    fb:91:bb:f1:06:53:7c:18:e4:15:7f:71:7e:32:52:
                    3e:b9:3c:18:24:b2:c9:5f:0a:db:97:54:b9:f1:84:
                    e8:b2:08:04:99:c7:c4:cb:f1:b3:3b:0b:45:ff:58:
                    ae:db:76:02:3f:bb:8b:a7:1e:eb:4f:a1:1f:7a:75:
                    ae:5f:d2:d7:7c:ac:72:9b:7e:4b:b1:e7:0a:6a:35:
                    ac:88:ed:fc:ad:59:cf:ab:32:5e:4b:37:da:ab:ca:
                    53:65:3e:8e:bf:17:38:bd:a7:fe:97:ba:4c:73:c5:
                    f6:2a:48:74:8d:88:4f:ec:8a:f5:fa:a9:68:9f:8c:
                    b8:9a:23:bb:4e:e3:c8:0d:42:fb:ed:d9:52:f1:66:
                    16:d3:c9:28:76:bf:eb:27:16:6f:01:fd:2d:64:20:
                    dc:c5:bf:b5:1a:f0:38:05:63:41:f2:4f:9c:f4:89:
                    c0:77:7e:3d:6d:21:77:16:1e:01:8e:38:0a:c7:ed:
                    fe:aa:b3:37:79:73:c1:4d:14:45:09:86:b5:76:bc:
                    41:f1:f3:f0:3c:9b:d5:b8:62:af:85:ee:31:16:39:
                    2e:b4:14:c3:45:63:6b:25:6b:8e:ee:74:a7:e4:de:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:D1:99:EB:56:88:22:B1:53:E5:84:9D:69:F7:F9:79:4D:05:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:47:65:1d:a0:ab:eb:21:8c:72:05:11:b3:26:3c:97:60:22:
         ab:b4:c4:1b:c9:34:41:1d:a3:81:2f:5d:9b:92:f5:05:9b:59:
         d4:a8:b8:f9:ef:ab:ef:74:d7:7b:c7:df:6b:ab:86:95:dc:3a:
         bc:bb:e4:f7:95:5b:3b:82:e9:f7:2e:03:23:5f:07:cc:7a:ef:
         82:f6:80:51:bb:d7:37:64:b8:fd:3f:95:84:92:a6:48:1c:b2:
         0f:e1:62:3c:86:7b:f4:33:e1:2a:65:d7:c7:e1:50:db:27:44:
         ed:dc:7d:2b:db:60:3c:6f:d9:17:54:3c:cc:25:ba:13:c2:1f:
         3f:bf:08:d5:1c:fc:78:04:ab:90:b7:73:9e:ae:85:0a:b8:3c:
         42:1a:74:04:c6:26:83:41:56:d2:bc:94:65:75:17:aa:67:7d:
         97:44:65:f1:90:ff:85:32:13:5d:cc:21:be:c4:37:82:d3:c2:
         89:b2:0f:5f:b1:18:27:51:dd:f9:66:61:f5:15:76:51:fe:0c:
         86:02:fa:a3:a1:f2:09:94:31:f9:2b:fc:9b:2e:10:01:7a:a4:
         ac:5b:cb:4b:3b:18:d3:e4:9f:de:31:81:09:82:00:07:a3:4e:
         a6:08:46:5b:43:48:31:98:5b:28:a7:3b:17:9c:01:e5:16:da:
         16:af:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:11 2025 by rpki-client