Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa
File:                     b340bfd7-0af8-3e78-8463-41e35c209b78.roa (raw, json)
Hash identifier:          9E/IPxmEbMOuxXeaZoqBSwoaMAVnQfafnF/UlpDRHMQ=
Subject key identifier:   BC:1D:CB:8F:F5:39:CE:80:3E:CD:70:B2:F7:26:C8:BC:35:21:C9:2C
Certificate issuer:       /CN=060abe91-ae00-46c9-a9b7-b46f0b295194
Certificate serial:       010D0C9F432858487FB5E50A9C6942C1B1524280
Authority key identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     32250
IP address blocks:        205.189.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e5:0a:9c:69:42:c1:b1:52:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060abe91-ae00-46c9-a9b7-b46f0b295194
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=ea06007b-3f7a-492a-a04d-dc371f2478a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:d2:2d:9e:73:8e:ad:ae:45:fc:b7:1b:5a:
                    92:1a:2c:88:10:cb:fc:e1:99:69:81:f2:91:ef:31:
                    71:e6:95:c8:0c:c6:ec:b7:de:34:cb:91:87:9f:e9:
                    4f:99:b3:ce:b1:d5:9b:4b:de:f9:44:ba:62:04:ae:
                    b0:1d:9c:79:21:03:6c:6b:91:f1:9d:1f:07:c3:ae:
                    db:8b:99:80:ca:22:de:ac:f8:23:9d:29:ec:82:47:
                    f6:93:1a:b6:50:f0:2c:58:29:05:7f:74:db:eb:d7:
                    1f:e5:39:9b:ab:e6:d6:ae:ea:48:22:1e:ba:d5:1f:
                    a9:55:7a:c6:52:1a:ae:d4:94:6d:46:36:08:6f:e8:
                    d4:92:85:e2:11:ef:37:ee:ae:49:e7:28:d8:df:78:
                    32:c2:1a:91:e5:a2:17:95:cc:a6:e2:9d:6f:3f:5d:
                    74:92:c6:4a:1b:41:f5:a8:8a:1e:9b:4c:e8:11:dc:
                    0f:5c:23:b5:00:11:91:87:64:ca:c6:0b:b2:b3:bf:
                    65:c4:95:53:25:7b:0a:51:3e:c9:41:7e:d7:ec:36:
                    49:8e:6d:eb:7b:d1:2d:b7:df:3c:3e:47:1a:f2:2a:
                    90:f5:fe:85:9c:e5:4a:41:31:54:ef:e5:54:75:f8:
                    96:e3:90:3b:77:1b:6e:9b:9f:10:7e:1c:c2:d4:6e:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:CB:8F:F5:39:CE:80:3E:CD:70:B2:F7:26:C8:BC:35:21:C9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.crl

            X509v3 Authority Key Identifier:
                keyid:D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.189.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:20:b2:81:f0:fd:95:a3:26:56:50:5f:fd:1d:07:d8:09:
         bc:d8:1b:46:cf:85:21:3d:3d:c2:ae:ca:93:cb:9b:c5:35:8d:
         4a:40:eb:0b:3b:30:14:dc:34:05:0f:47:0e:8e:68:98:88:32:
         3b:be:09:47:e8:20:49:b9:6d:cc:99:26:79:c3:dc:19:33:c3:
         35:22:f7:67:83:4a:3d:34:d8:9f:8e:cf:dd:fd:23:7e:47:9a:
         99:ad:51:3c:17:af:62:e2:48:2b:31:20:a5:45:3e:ee:48:44:
         0c:3e:a7:1a:d0:16:0c:d8:b2:02:3e:ca:5f:94:1d:28:58:71:
         6a:0d:1b:c3:bd:4f:c3:c6:5f:8a:5c:44:6a:68:2e:fe:94:c4:
         d4:92:60:b7:44:06:8f:48:a2:da:dd:74:9a:c3:eb:e9:0c:10:
         2c:17:65:6e:dd:bd:ba:c6:76:84:a7:ea:aa:20:ba:d4:62:ea:
         00:54:6d:f5:6f:e3:70:27:07:91:80:1b:fa:00:77:6b:5a:5b:
         8d:d1:e3:c0:bf:bf:90:cc:4a:ef:98:d5:63:61:04:35:bb:ac:
         7c:6c:bb:db:b2:ef:ec:4e:d6:84:96:1f:8e:4c:e8:95:05:9c:
         ad:2c:fd:35:79:be:2a:8e:4b:db:dc:46:8c:b9:5c:42:d9:9f:
         5e:17:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:05 2025 by rpki-client