Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9164a06a-57df-3efe-8bc0-58ff9131b088.roa
File:                     9164a06a-57df-3efe-8bc0-58ff9131b088.roa (raw, json)
Hash identifier:          3rV5afTc3YFddyOeRqFQTRsEwDVhQZLUM4tC4TSzpbQ=
Subject key identifier:   ED:31:40:78:84:29:68:33:09:EF:36:99:28:78:2E:AC:88:2C:3F:C0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB65489451E765C0950A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9164a06a-57df-3efe-8bc0-58ff9131b088.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        205.141.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:65:48:94:51:e7:65:c0:95:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=2834b41e-85b4-4b00-8f50-d2e40457388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:cb:ab:3f:a6:6d:66:5e:b9:d5:29:05:d8:
                    d7:12:39:44:d4:0d:ba:5e:57:da:8e:a3:82:31:a3:
                    15:11:7f:f4:74:b4:82:6b:58:5d:59:c4:e3:e3:00:
                    a7:ba:93:7f:7f:b1:1f:4c:77:d1:8f:4b:e3:b8:aa:
                    cb:f1:39:8a:9d:35:b7:49:f7:5c:db:44:5d:03:62:
                    98:9a:0a:dc:0a:c1:96:99:88:0f:86:d9:5d:ce:f2:
                    29:a1:e7:4e:73:b5:47:54:53:67:3b:ca:e6:3d:79:
                    34:c4:61:a0:99:1a:1b:b9:ed:a1:e7:99:20:a0:98:
                    28:65:b5:42:1e:41:8e:64:cc:ce:e9:5a:c9:14:e9:
                    39:1c:80:f0:0f:1d:d1:56:95:2c:97:7e:24:c5:18:
                    61:cb:e6:51:bd:4b:c9:59:0a:3f:fc:48:05:e0:80:
                    d8:77:c3:10:c6:d1:de:ba:54:e2:6c:e1:9c:6f:32:
                    ce:30:70:d8:62:d2:b1:72:80:8c:37:8d:a2:ed:11:
                    9d:48:39:73:a5:c3:bc:79:6e:c7:d6:87:3e:b1:0c:
                    9f:fb:4d:c1:c1:72:a7:21:1c:31:a5:4d:0c:72:f3:
                    1c:32:b0:44:a1:54:6d:2e:eb:cd:36:2f:26:7d:af:
                    0f:0f:4a:6b:64:fd:5b:cd:3e:4f:af:f7:04:dc:87:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:40:78:84:29:68:33:09:EF:36:99:28:78:2E:AC:88:2C:3F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9164a06a-57df-3efe-8bc0-58ff9131b088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:f0:c0:05:0c:38:46:ab:55:c7:49:6f:76:f6:ec:9c:68:
         16:ff:8d:d4:17:2c:b7:1e:41:17:1a:ef:53:ff:4e:6f:91:d6:
         eb:81:bd:a1:94:6e:4b:b1:90:a6:fd:03:cd:15:aa:85:bf:05:
         f8:e1:52:da:92:2c:f3:a1:69:2d:de:f3:27:a4:90:ed:25:d6:
         6b:3c:54:db:c6:63:a7:8a:88:ef:f8:c5:00:71:43:85:5a:e1:
         83:e6:d7:3e:e9:2f:45:5a:5c:02:84:d7:65:ec:31:13:94:30:
         96:b8:45:90:48:05:b9:79:91:38:0f:41:88:ca:b0:39:05:97:
         5f:b4:a5:be:ec:f7:81:dc:16:da:f2:f5:d9:57:2c:b2:a8:40:
         3f:5d:58:1b:42:34:4a:bc:29:c0:65:47:ec:6d:92:59:5e:8d:
         48:fe:3b:b2:83:1b:43:14:84:84:66:c7:a4:be:b4:20:92:30:
         f2:47:97:53:2c:66:b4:05:d5:c2:8e:6e:9f:06:cd:9c:5a:bf:
         33:14:27:bb:b7:6f:bd:02:6b:97:8a:f9:7a:4f:b2:32:80:bd:
         df:a4:67:02:12:fe:73:5d:c8:53:72:d8:33:15:2b:1c:b7:54:
         6c:e6:2b:be:7c:cf:17:88:83:dd:22:5c:a1:1e:62:dc:e6:46:
         eb:c3:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:09 2025 by rpki-client