Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
File:                     48d29f1b-28ce-30ad-a06c-026eb5182a52.roa (raw, json)
Hash identifier:          uzR9lerbk8AZTzM+wtbdbMFQATzyXD0Hrq7S56UOvRI=
Subject key identifier:   F9:40:61:8A:DC:DA:5B:CA:EA:16:8C:97:A8:85:3E:E6:6D:8F:00:7D
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285848EF61426E955B9488B3A48740
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     10317
IP address blocks:        204.155.200.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:42:6e:95:5b:94:88:b3:a4:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=6679999f-7576-45ee-8e12-e9ea9b86f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:1f:4d:90:8e:e0:74:ec:8b:40:0d:ec:47:
                    73:39:72:81:6d:69:c1:14:a1:94:44:c6:b3:6b:d8:
                    7e:36:27:bc:7b:b7:6f:84:07:4b:d1:4f:e5:48:79:
                    84:51:d6:17:a9:e5:4b:69:e2:6f:86:e0:59:5f:3c:
                    74:df:e8:c6:70:a6:21:09:fa:e6:23:99:17:f9:40:
                    00:d4:c7:93:a8:e8:bd:32:c7:02:18:fb:13:8f:60:
                    75:f2:27:c4:6a:03:dd:01:28:4b:aa:b0:08:ed:99:
                    95:4c:71:1b:43:f0:9e:81:0a:9b:03:50:e0:80:af:
                    53:ba:8d:03:36:c7:a7:6b:24:66:34:5d:a0:e3:97:
                    9d:9c:8f:0b:e9:27:b8:2e:8c:bb:57:cf:ab:de:d4:
                    5c:34:3c:6a:fd:be:19:dc:1f:7e:8b:d9:d7:56:f6:
                    d0:ba:42:a6:5b:12:00:11:d2:52:77:40:ef:1c:92:
                    54:bf:37:f2:00:72:fc:fa:77:f6:7d:9c:7a:cc:7d:
                    85:78:cc:d2:aa:ea:fc:1a:14:f7:50:bf:0a:dc:1f:
                    45:a6:8b:ba:3c:a8:77:49:1e:7d:de:45:50:66:0d:
                    49:86:14:f6:4e:49:b3:df:2d:34:81:b6:2e:09:1c:
                    71:53:e0:91:85:f6:3b:f5:73:28:08:e4:85:9a:a8:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:61:8A:DC:DA:5B:CA:EA:16:8C:97:A8:85:3E:E6:6D:8F:00:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:82:8f:56:fa:f8:9d:92:5f:ab:cd:34:0c:5d:01:2c:3c:
         8e:36:f6:e5:58:d1:f4:28:3e:2e:ee:b4:5e:da:f1:2f:59:ff:
         ef:98:55:ad:28:0e:d2:ba:7c:31:cd:bf:f3:30:4b:85:05:c9:
         54:f5:dc:e4:ff:0e:28:56:38:14:77:a5:fa:e6:2d:46:75:85:
         1c:55:d6:d3:84:e9:20:0e:af:ad:35:73:fb:e5:1c:2b:01:48:
         50:32:fb:b7:6a:db:02:82:4b:2c:84:19:df:78:b9:5c:f4:66:
         96:cf:df:be:87:b7:53:0a:9d:b6:a5:68:06:dd:b7:25:89:bc:
         84:9a:c2:e2:45:03:a8:77:4d:ac:95:a9:ff:77:01:16:7d:4b:
         87:c8:da:ce:3d:27:9d:6f:ab:a6:b4:dc:e6:f1:db:7b:75:21:
         aa:44:21:70:7d:e4:b6:57:cc:f8:aa:18:fd:6f:3c:7c:bc:da:
         01:3b:cd:20:c1:31:6b:38:9a:52:64:60:9b:43:2b:d9:fe:47:
         64:44:44:38:b3:9b:85:9e:e7:a8:36:23:fc:69:a8:ca:5f:41:
         4e:25:04:d7:2f:93:d1:72:d6:38:a5:85:9c:da:97:f4:23:74:
         dd:9a:68:b3:3f:2e:9f:5b:7f:b3:19:4f:fa:0f:80:8a:ff:a4:
         ed:a4:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:17 2025 by rpki-client