Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa
File:                     e2c89e30-0475-3362-983c-c7cdd6f2e422.roa (raw, json)
Hash identifier:          G4mqUdspP8I848b9VhK4zYtccuGAqxNWK/n/pV4m2sQ=
Subject key identifier:   88:DA:1D:9B:DC:15:86:27:BD:41:0C:77:7F:B2:56:A2:1D:CE:30:41
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285848EF614238631ACCA16846D180
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     10317
IP address blocks:        204.155.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:42:38:63:1a:cc:a1:68:46:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=5452429a-7e2a-402c-a8ec-51571b3712b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:65:c7:9c:ed:88:3c:c3:2e:2f:5f:3f:c4:
                    69:e9:7b:54:dd:8f:34:ec:44:3c:bd:13:93:de:5d:
                    c3:45:8f:3a:3d:36:f4:b6:cd:e2:19:88:2f:44:96:
                    db:7e:b9:9e:df:b9:6b:93:50:f2:45:ed:91:db:c7:
                    da:6a:af:72:f6:dd:88:9f:19:26:b1:6c:0a:a6:11:
                    11:38:c9:c1:15:36:81:c3:5a:42:58:2f:48:a7:62:
                    cc:be:8b:24:95:f3:6a:47:1e:39:a7:b9:46:e7:c0:
                    39:0d:3f:e7:ca:95:f9:29:84:ad:25:06:94:f0:b9:
                    25:0a:1a:c8:3a:9f:b3:0e:ce:4b:ea:e9:31:25:ae:
                    c6:f1:c6:1d:2c:58:d7:a6:9c:56:bd:8e:ca:f7:77:
                    88:ef:30:18:a3:b2:06:34:a8:30:9b:80:52:ee:dd:
                    96:2d:0c:b0:d6:46:ff:23:55:47:ed:f1:19:37:8e:
                    5c:ef:e4:b5:1e:fb:df:50:bf:cd:9c:0a:c5:51:13:
                    2c:ba:17:75:52:c7:34:d9:76:fa:8a:ef:2d:8a:9a:
                    0c:24:49:1a:8b:13:1c:74:68:b6:15:83:f4:b7:4a:
                    3e:40:43:f8:59:f8:56:15:92:04:c6:35:c9:2c:ee:
                    29:86:fa:db:9b:d3:e1:3a:9b:8f:69:19:42:05:89:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DA:1D:9B:DC:15:86:27:BD:41:0C:77:7F:B2:56:A2:1D:CE:30:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1e:8b:92:7a:ed:06:80:28:20:31:91:93:33:06:65:c1:b4:
         8c:3a:fb:f2:b1:5a:11:bd:13:25:eb:a1:8d:56:ab:a2:3d:31:
         8b:a0:e4:ce:51:97:c0:c7:74:4a:93:cf:0f:f1:21:67:14:51:
         9e:7f:f5:af:6e:1a:dc:aa:94:66:18:8b:a8:7b:de:af:8f:a3:
         71:24:44:5c:a4:db:d2:65:24:12:52:52:57:5d:d2:e6:bd:77:
         3f:94:53:02:eb:0f:44:6d:8f:f9:42:20:53:5b:1e:f2:ee:41:
         d8:61:42:00:00:a3:90:b9:3c:7f:d0:d1:3c:30:af:c4:b7:e1:
         20:32:7d:9d:0e:b1:73:e6:f7:ce:57:24:a5:34:1e:ef:28:06:
         64:8c:7a:76:22:ac:fa:c2:63:87:aa:bb:0d:b4:4b:2e:c5:8b:
         60:66:cf:e1:6f:00:f3:dd:96:69:af:36:23:7f:db:f1:70:fb:
         18:ee:14:2b:53:ac:5b:40:73:e7:60:83:86:d0:cf:c6:5a:b3:
         3f:c9:ae:c5:6d:ea:53:1d:75:47:11:c8:78:26:8d:3d:ff:ec:
         ca:76:f4:89:04:7e:eb:2b:90:90:bc:95:4f:6a:0b:66:59:50:
         c6:85:36:0b:58:06:c1:f1:0a:6b:e1:7b:4e:33:57:a6:de:41:
         d7:82:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:12 2025 by rpki-client