Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
File:                     ebab3613-1b63-32c0-b4b9-92539a7ae900.roa (raw, json)
Hash identifier:          txga1WyuRNwd1RIjQYn4s3BA3JKF4GA24I8a9aVMwjA=
Subject key identifier:   33:22:C8:BA:E5:64:AC:38:0E:3D:6F:06:61:EA:16:E4:6D:6D:72:7C
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F43285848F0C66B93396ED830E43B2600
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
Signing time:             Thu 20 Feb 2025 02:00:40 +0000
ROA not before:           Thu 20 Feb 2025 02:00:40 +0000
ROA not after:            Wed 21 May 2025 01:00:40 +0000
asID:                     26411
IP address blocks:        103.207.40.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:c6:6b:93:39:6e:d8:30:e4:3b:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Feb 20 02:00:40 2025 GMT
            Not After : May 21 01:00:40 2025 GMT
        Subject: CN=6ce2b8e3-c907-43b5-950c-5547df73088d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:c4:ff:db:d9:af:24:a5:0e:63:a8:d8:4c:
                    63:75:d6:6e:63:80:14:b6:2f:65:6c:41:92:5b:52:
                    9e:3b:67:52:cb:ea:a9:82:34:91:4a:2f:63:98:6b:
                    dd:9b:6e:92:09:c5:73:02:cc:c4:27:43:f3:39:40:
                    9a:90:23:ea:7c:e3:1d:5a:37:93:a9:ad:61:e0:37:
                    85:b9:ea:1d:f4:ac:52:21:88:da:c3:16:70:04:ad:
                    24:14:5f:41:01:c8:86:1d:91:25:a4:6d:7b:75:06:
                    15:42:4f:5c:1d:bb:3c:98:e6:fd:c9:d6:24:54:e5:
                    27:d2:dc:55:80:bc:26:4b:19:4d:dc:aa:d3:ce:81:
                    9b:89:78:0f:27:0b:05:7a:6e:9d:00:60:b0:53:fd:
                    b2:52:6c:6c:1c:d8:d6:33:85:35:c2:9c:a9:35:90:
                    f5:05:a4:a8:d2:79:4e:e6:a6:eb:02:cc:28:a9:3b:
                    a7:ca:e2:3d:6d:78:36:4a:c8:9e:4d:0c:91:2d:3a:
                    18:6c:97:2f:80:50:bf:f9:93:e6:bf:42:b6:1a:8f:
                    d3:5b:5e:37:20:29:7d:a3:df:83:7d:89:b5:a0:4a:
                    ad:6a:f9:15:a9:5e:e5:ab:dd:4a:1e:a1:f0:6e:13:
                    49:8a:0c:9c:2f:a4:b4:3a:ed:cc:66:56:08:29:e9:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:22:C8:BA:E5:64:AC:38:0E:3D:6F:06:61:EA:16:E4:6D:6D:72:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:7b:e9:03:eb:51:5e:01:53:40:ce:3b:dd:7e:68:25:87:
         de:c9:da:9b:0e:96:ec:74:23:40:6b:5d:57:8e:de:32:14:9e:
         9a:b3:a2:4f:5a:e6:33:42:ac:b2:be:8f:8a:be:62:25:a4:bc:
         d7:bd:d1:8b:f1:fe:9f:05:c5:24:0a:77:5e:cd:42:c6:88:43:
         c3:fc:c8:b2:e0:d7:03:c7:d3:95:f9:71:7b:b7:09:23:6a:a5:
         cf:02:27:92:13:c3:b4:ec:81:8f:7f:8d:c5:e0:44:32:3c:f2:
         a3:39:7a:96:48:c5:9f:84:39:4e:79:4c:95:da:d4:ae:4c:82:
         98:1c:65:03:14:d5:da:6d:38:dd:22:d3:5e:27:bc:6e:d4:e3:
         84:58:7b:5c:a7:46:78:77:79:e0:e2:93:7d:e1:29:07:41:b4:
         91:f0:15:13:bf:a9:a9:25:aa:3b:34:ed:84:86:24:f9:c0:d0:
         f5:00:fd:e9:e8:a7:3d:c2:50:81:ca:7d:91:b2:1d:df:a8:b4:
         d9:34:5a:73:f9:da:2d:6b:91:2f:6f:31:8a:42:9a:1f:31:65:
         78:ad:5a:1b:80:81:83:ba:05:e4:8a:b4:49:02:bb:92:b7:3a:
         d8:7b:ae:a4:58:f0:ac:1e:ec:c8:25:80:92:cb:9a:45:fb:d7:
         b2:88:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:55 2025 by rpki-client