Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa
File:                     c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa (raw, json)
Hash identifier:          fBBb9C132e+6bxm+2T3JqWGss6Du1k2zCKdnQPPYlCw=
Subject key identifier:   3A:0F:CE:00:D9:2B:29:05:A6:A2:B2:77:B1:6F:9A:DC:54:E6:58:47
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858492B0FFE7067D369446B7B7A00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa
Signing time:             Wed 12 Mar 2025 23:05:49 +0000
ROA not before:           Wed 12 Mar 2025 23:05:49 +0000
ROA not after:            Tue 10 Jun 2025 23:05:49 +0000
asID:                     19437
IP address blocks:        125.253.67.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2b:0f:fe:70:67:d3:69:44:6b:7b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar 12 23:05:49 2025 GMT
            Not After : Jun 10 23:05:49 2025 GMT
        Subject: CN=3a0fb23f-e97a-4c0f-b79d-f21569c828c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:8e:7f:7c:73:d7:38:c8:11:06:96:7d:14:
                    04:a4:40:43:08:63:ea:5b:8f:e3:62:f2:34:fa:5e:
                    35:3c:82:0b:3d:70:02:2d:12:6a:48:c4:bc:a7:43:
                    7a:8d:8e:fb:08:ea:5c:f7:03:ae:83:cf:a6:cb:c5:
                    cc:3a:7f:f8:c5:36:30:b1:c2:89:19:9d:00:df:8e:
                    a8:82:fd:42:38:27:d0:ca:bf:47:ca:1e:0b:d4:14:
                    f0:f3:90:e4:8b:42:f7:d3:d6:b3:40:13:5e:09:92:
                    42:9a:8b:00:e6:29:6c:e8:ab:4e:9e:39:4c:df:77:
                    59:42:01:4d:39:cb:0e:ee:73:4b:d4:bd:e4:f7:a8:
                    6e:99:1d:21:89:4d:29:e5:67:58:4a:e5:ee:87:3a:
                    e2:a7:d1:c9:ac:97:d4:bb:fe:b6:17:3e:2f:05:a9:
                    93:4b:f6:f7:29:59:9b:d4:cd:af:be:26:a1:f9:d6:
                    0d:9b:e8:ff:90:9a:4a:f5:f9:a9:68:bb:8b:2f:a1:
                    1c:b1:89:3a:1b:b4:66:c8:9b:d0:a6:32:3d:78:1b:
                    19:ca:e2:49:ce:73:3f:cb:0c:b0:ce:57:6b:0a:21:
                    d8:d6:cf:da:f8:50:b1:b5:9e:c2:25:9d:e0:3f:92:
                    b8:cc:43:c4:5c:4e:d2:75:6e:e5:8c:0a:41:14:4f:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:CE:00:D9:2B:29:05:A6:A2:B2:77:B1:6F:9A:DC:54:E6:58:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:b7:a9:40:73:37:e4:62:fc:73:bd:0a:89:67:05:56:66:
         6c:0b:e0:50:66:40:02:a2:97:19:41:b4:7e:0d:58:c4:28:5d:
         c8:c7:62:48:cf:ac:f4:d2:2a:bf:e2:e3:1e:af:9e:62:48:3d:
         f4:d3:03:71:82:cc:86:46:58:62:b7:a3:ad:1f:a7:00:9d:a6:
         17:90:cd:7b:6b:95:b9:4a:e4:de:1d:28:5f:30:68:80:a9:56:
         6e:aa:b7:70:a9:86:bc:4d:2b:b6:d4:c5:9c:de:8b:74:38:d0:
         f6:a9:e8:4f:9f:c0:80:f9:ef:d4:20:38:a2:fb:78:b9:11:eb:
         6b:8f:06:6c:e5:4a:b8:71:65:99:87:a1:c0:4a:d0:84:b4:be:
         e9:9f:57:4f:34:77:0d:a7:1d:0a:05:dc:cd:5a:d0:3f:e1:b7:
         ad:b5:7a:71:eb:3a:a7:84:87:00:fa:b6:a4:20:52:b3:87:f1:
         24:f1:58:8b:fa:9e:35:d3:e8:57:46:3c:c6:20:bf:b8:f1:af:
         db:12:6e:53:6f:16:5f:ba:04:64:25:9b:f8:d9:99:47:b4:5b:
         66:85:6a:89:0c:66:19:ca:3b:de:dc:01:d6:86:0a:35:95:f4:
         13:04:77:60:72:c5:2b:6a:f1:e8:df:97:53:0a:8e:c8:31:c8:
         61:9a:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:46:31 2025 by rpki-client