Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa
File:                     5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa (raw, json)
Hash identifier:          VRX3UU+XVIzqD1rW8ObLJi0+65gJdslmF9ZuGZlI8H8=
Subject key identifier:   57:C5:F7:6B:98:D8:BD:75:83:D5:E3:3A:56:35:E0:77:E0:1B:C8:1B
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285848EF6141F5B0EB285083EAAF80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     10317
IP address blocks:        204.155.120.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:41:f5:b0:eb:28:50:83:ea:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=31fa0063-fe23-4922-bcb1-6a29d3088e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:71:ec:63:87:fc:f0:2b:51:ad:25:96:86:
                    fb:dc:0a:43:62:f1:98:ec:2b:0a:1d:07:a6:f1:7a:
                    0b:dd:c7:ef:6d:11:93:46:b6:93:03:2c:8b:53:09:
                    14:f9:f7:3a:2d:d1:16:14:12:fb:e9:8a:cc:4d:b5:
                    78:98:25:cd:63:e1:2f:79:c5:97:a0:ea:bb:91:3f:
                    08:36:33:d6:d9:26:c9:06:69:98:9f:84:78:9a:ea:
                    95:d6:41:fa:49:6b:1e:f1:ef:88:94:61:26:cf:63:
                    56:15:ab:b1:28:46:e2:02:51:f8:9b:c6:5c:d3:41:
                    36:10:51:79:6c:e7:66:18:ae:27:bd:ae:df:a1:28:
                    40:d6:20:91:73:f8:14:4d:cd:5f:35:56:1c:dc:32:
                    aa:0f:e5:7e:62:02:d3:5d:a7:84:41:0c:94:0b:ed:
                    de:45:01:ec:5d:b7:37:0c:09:e6:ba:06:8d:e4:25:
                    b6:5a:87:98:31:69:cf:ad:a3:11:3c:f2:31:c6:ce:
                    e3:37:f8:32:f8:8b:b4:db:94:ab:99:62:5a:65:62:
                    a6:f2:a9:e2:cb:28:1d:fb:90:54:c8:27:89:b8:6b:
                    ed:3c:1d:e7:9d:20:70:02:0d:4c:51:9e:ca:5d:4e:
                    26:f7:b9:28:50:3e:12:ca:89:c1:c3:53:81:5c:e2:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C5:F7:6B:98:D8:BD:75:83:D5:E3:3A:56:35:E0:77:E0:1B:C8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:00:9d:38:d7:b5:86:90:3e:54:3e:a3:61:7e:63:a8:2f:4d:
         b1:65:ba:b2:e3:83:17:07:ed:e0:0c:31:a9:a4:b6:41:3b:e5:
         6f:92:b2:d0:28:ca:a6:ad:fd:4b:5e:a3:ce:72:e4:86:d0:53:
         74:b8:3c:c8:6e:62:a0:26:dc:9e:79:fb:1d:c1:54:96:16:fc:
         b6:7a:31:ac:ce:69:eb:c5:88:60:15:20:fb:a6:f2:db:de:b7:
         fc:dd:a8:48:2c:7a:da:53:1e:ba:29:25:63:34:46:dc:5a:70:
         eb:a9:ee:8c:9c:7d:6c:77:1d:ab:b6:79:c6:50:63:8b:8a:3c:
         c7:80:b0:3c:7f:bf:63:fa:ba:1d:3f:86:32:82:02:f5:6d:cd:
         d1:ce:5d:06:2c:d7:39:9e:e7:a8:b4:25:56:55:db:fd:22:0b:
         30:f2:c9:2d:df:90:ee:13:9f:1a:f8:61:46:94:6e:46:ba:1c:
         20:ed:3c:7d:99:36:b4:57:31:91:85:e5:aa:91:00:41:dc:48:
         6c:af:7c:7a:fc:e1:93:6c:f9:8a:4f:23:1e:52:db:0c:a2:9a:
         76:14:c4:55:da:6c:4f:76:be:c2:01:65:82:a1:73:b3:13:92:
         be:4a:b6:e9:75:f9:c9:2f:d0:e0:c3:ad:e2:02:c3:13:1c:a9:
         9c:07:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:01 2025 by rpki-client