Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa
File:                     20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa (raw, json)
Hash identifier:          d1WKrxEm9QcvrcKwxaoZO1m0cUKvIVnCbTLWjLnNMzM=
Subject key identifier:   6F:1E:AB:69:FC:39:B6:D0:45:95:50:CB:14:CD:4A:B6:67:A1:1C:87
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE86242314B716BFDED25800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        207.37.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:24:23:14:b7:16:bf:de:d2:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=e3cbb52c-5849-49f8-8e13-c5a6bbd67775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:98:15:14:8d:74:11:25:1d:ab:d5:36:ee:
                    1c:fa:ff:8f:24:cf:b0:e9:48:6d:79:e7:14:20:4e:
                    22:f8:23:a1:f7:e2:f4:ec:6b:02:51:17:a0:d0:d7:
                    e2:f8:a1:8c:23:32:6b:04:7d:f1:c0:d6:11:a2:a9:
                    43:eb:c0:51:6d:cb:88:87:85:85:4b:73:8a:e0:0d:
                    69:d1:cf:5e:3d:16:50:fc:4c:c4:1c:f1:35:3b:69:
                    7c:10:0a:3c:4c:3f:a7:3f:f0:43:02:44:83:82:ec:
                    84:7a:70:1e:6d:a8:24:eb:c2:3b:0d:3e:f4:cb:93:
                    0c:a9:ae:af:0b:63:44:33:f5:32:b0:a7:57:94:8e:
                    01:32:ff:53:2b:9e:e1:f3:ed:39:96:b1:f5:6a:84:
                    b7:05:ed:19:e6:c0:19:44:ab:58:9f:c0:95:18:2f:
                    43:40:e8:42:29:a9:de:10:33:80:e6:15:66:99:f2:
                    45:c7:49:2a:cc:7a:5d:2e:91:74:6d:dc:ce:1f:cf:
                    a6:21:37:6f:65:e3:78:5c:d9:09:a4:e6:74:6c:8a:
                    3d:b3:bd:24:0e:b7:23:59:3d:2a:12:37:68:37:e1:
                    ad:5b:b0:0d:05:82:46:b4:34:2f:4b:66:ec:60:c9:
                    5d:68:2a:9c:52:4d:93:86:d3:66:85:a6:ba:dc:b3:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:AB:69:FC:39:B6:D0:45:95:50:CB:14:CD:4A:B6:67:A1:1C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:fb:c1:ba:cb:27:8f:2e:f4:0c:8a:d7:bb:7a:a9:67:73:
         be:a0:ab:72:84:c2:37:f9:84:54:d3:e7:73:ed:bd:21:0a:f4:
         b9:f9:b1:db:e4:87:2d:bf:97:0e:ff:4a:70:bd:0b:67:b1:c6:
         d4:a4:80:bc:a9:96:0b:14:51:ef:3e:60:d4:5a:13:84:2e:29:
         63:0f:c8:da:34:39:b5:30:0d:d6:78:9d:45:0c:34:a4:9c:05:
         85:e6:16:c6:f1:ad:fb:6a:0a:be:c2:a9:23:21:98:5e:78:12:
         f5:ff:7c:29:76:3e:35:5a:a7:15:d7:9a:f2:50:1d:90:e9:70:
         a0:0e:f8:a1:24:13:6a:c0:23:05:a7:80:02:04:e6:0b:c7:7c:
         28:d5:ce:75:fc:65:8d:04:da:5f:d8:ca:08:40:44:e2:37:e8:
         6e:8b:8b:5e:5e:19:29:8f:83:a1:5c:40:be:38:64:42:a1:1b:
         8f:0d:04:79:c6:28:5b:72:2e:01:0f:2d:12:52:a5:d8:56:1c:
         c0:7d:a0:e8:e7:9e:17:3d:ce:bb:0c:fe:3f:b1:a4:87:0e:d9:
         9b:59:b9:51:a7:e6:45:3e:74:a0:c4:c8:74:5e:fd:b9:37:61:
         7d:25:dd:6a:41:6a:d9:d5:0c:73:3c:de:18:d9:d3:cd:7e:11:
         b0:61:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:34 2025 by rpki-client