Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b91dc8-3f05-34df-ad81-939d16133e33.roa
File:                     19b91dc8-3f05-34df-ad81-939d16133e33.roa (raw, json)
Hash identifier:          1M6QZFLY12YtF7ehfuYVuu9XNlRL01h3SP4gS9ECL7Y=
Subject key identifier:   8E:8B:09:09:1B:66:B5:27:35:2D:DB:48:AB:26:FC:47:70:DF:4B:69
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5CDB05279209900EBE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b91dc8-3f05-34df-ad81-939d16133e33.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     5714
IP address blocks:        204.26.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5c:db:05:27:92:09:90:0e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=888ccbf0-8ed8-437a-ad57-9b74755a2325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:2e:b1:ca:91:e7:b3:cc:2f:89:a9:c0:47:
                    ca:7a:49:81:23:f0:7a:42:ee:da:24:3d:39:ba:0a:
                    49:09:27:06:f8:b9:b1:76:ff:0e:ee:96:21:8c:d4:
                    8e:a9:77:0d:e6:2e:93:e8:03:69:74:00:e5:0c:ff:
                    be:c7:b5:d1:0b:80:28:cd:37:d6:e0:91:94:2b:2b:
                    a6:b4:a3:b4:0a:0b:5b:ee:6c:ed:80:51:79:86:bb:
                    8c:f8:9d:5a:b9:78:b2:24:56:65:8e:b3:df:a2:f7:
                    14:47:4c:17:da:7e:20:a3:c8:0f:11:ec:98:01:bb:
                    07:b3:78:9e:ed:59:44:94:13:34:f1:7f:21:7a:ad:
                    92:29:58:72:58:e7:77:90:03:9b:ce:ba:5d:80:20:
                    64:a2:ec:ec:db:24:ab:6c:bc:07:fe:3c:e8:91:96:
                    87:4e:16:c7:0a:1c:11:f1:7b:ea:5a:2f:d2:83:65:
                    3b:b2:2e:be:17:86:38:13:82:71:a0:03:df:07:67:
                    0c:5a:5a:73:00:41:22:30:48:01:20:fb:fd:4c:8a:
                    d5:8f:70:ee:0d:cb:81:5a:b2:eb:aa:ca:12:52:16:
                    62:0b:61:80:9e:b2:b5:3d:e1:f7:6c:a2:7e:fa:60:
                    c2:2c:cf:39:3f:1c:cd:4e:90:77:98:1f:0d:a2:7b:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:09:09:1B:66:B5:27:35:2D:DB:48:AB:26:FC:47:70:DF:4B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b91dc8-3f05-34df-ad81-939d16133e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.26.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:d3:62:f5:52:47:2f:6f:f0:ff:fc:c1:04:1e:bc:38:87:
         f0:bf:01:de:52:c4:ed:12:02:63:74:45:80:f4:c4:3d:72:5a:
         dd:02:19:6b:7d:a0:1a:3d:e7:74:fa:04:af:4b:c5:28:e0:16:
         e3:7b:94:b8:55:0d:d0:5a:a5:6b:12:94:d9:1f:2e:67:8c:3f:
         d0:83:56:7e:97:5c:81:d6:da:9a:29:7b:9a:0e:db:3e:08:07:
         ac:03:b8:ff:c3:25:7e:88:45:15:a4:17:55:6d:b7:8c:70:6f:
         88:1e:56:b6:64:c0:23:34:25:cf:ac:b1:6c:94:d4:26:1d:9a:
         be:0e:c2:6e:07:88:4a:70:95:9f:93:b2:3e:b4:43:01:88:57:
         5e:00:89:aa:66:b7:e8:aa:ef:05:bc:3c:63:8b:ee:7b:5f:22:
         c1:0e:1e:77:d1:0c:78:89:9d:1c:a6:88:31:01:63:e4:7c:cf:
         d8:81:ea:54:68:28:80:7c:32:c7:dd:da:22:76:9f:34:22:07:
         14:b0:ad:90:26:be:1b:89:8e:3b:a9:04:6d:47:2b:f2:e9:18:
         3d:d1:16:4e:02:2a:bc:23:6a:33:dc:12:82:ab:9a:56:95:4f:
         af:b5:22:ea:fe:52:b7:77:63:6a:e0:f5:8f:fb:03:9d:1d:ef:
         7c:a8:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:25:23 2025 by rpki-client