Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa
File:                     dd3f15e4-628e-32a4-b35c-957c51f9097e.roa (raw, json)
Hash identifier:          5CHXytJsEBLs5DcJQ0G5s71wMxBFsK8P0jkfjbkNlGo=
Subject key identifier:   FA:F4:19:B9:1D:6A:A0:E6:8B:13:BB:DD:48:C7:D6:08:76:DC:7C:B6
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F432858488DAB4DF443915704828CC240
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     31919
IP address blocks:        204.10.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4d:f4:43:91:57:04:82:8c:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=e0ee55c5-53a5-4f70-a767-5c31ded54621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:3c:29:e2:51:20:c8:73:ed:2b:d3:f9:96:
                    5a:a5:ab:c0:1f:c2:49:57:25:a9:31:9c:da:6d:9f:
                    3a:3d:be:db:1d:50:47:82:93:87:61:4b:21:89:22:
                    b5:7c:85:4e:fa:3e:5c:a6:24:39:41:40:db:71:50:
                    cf:6c:05:fe:67:84:b8:21:03:75:af:d9:a8:cb:06:
                    0d:ec:4a:7e:1f:13:58:48:39:4d:7c:13:f9:1f:8a:
                    8d:0e:4f:39:5d:ef:96:eb:90:c6:34:91:f4:fc:fe:
                    eb:26:b3:54:95:07:c2:63:4a:32:f9:f8:64:3e:0a:
                    0f:2a:a6:cc:7a:32:58:46:66:ea:1b:a1:f7:bb:c0:
                    63:d4:82:2e:dd:0d:4d:93:aa:91:21:4e:ce:ab:16:
                    05:d4:ea:8e:41:88:c2:84:8a:d4:b0:4a:ed:f5:ff:
                    20:87:a3:28:71:12:9e:5e:62:26:d9:53:e1:16:66:
                    cb:ea:46:56:0c:81:e2:8a:1e:81:1f:ec:67:2c:8d:
                    5c:c3:57:cf:7e:c8:26:0c:bf:99:95:82:93:b8:bf:
                    fa:2f:b5:f3:9c:be:41:e6:9e:c3:da:cb:10:62:56:
                    2b:59:39:a5:93:8d:71:44:29:21:b2:22:db:1c:9c:
                    15:ee:8a:7e:37:30:3b:5c:8a:66:2e:1b:39:bc:71:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F4:19:B9:1D:6A:A0:E6:8B:13:BB:DD:48:C7:D6:08:76:DC:7C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:8d:32:01:59:55:51:61:d2:69:ca:36:d1:f0:1e:e3:f9:
         9d:1d:b6:d4:01:e4:c4:30:94:eb:66:f2:18:fa:71:15:65:bb:
         15:bd:33:90:2c:91:e0:33:74:d3:a0:d3:4d:1a:bf:65:1a:80:
         d8:5f:a1:21:4a:41:22:72:bc:ec:cd:8e:ff:5d:2b:79:07:fe:
         a0:9c:a2:42:fa:c4:cc:e1:b4:d4:89:b6:3f:5d:23:e1:4f:81:
         b5:61:49:86:7c:f4:4a:70:f1:5c:12:5f:8f:a7:66:57:ba:45:
         28:72:9f:b2:f7:59:9d:c6:a2:2b:d9:75:34:21:76:f8:64:08:
         39:ed:9f:5b:b7:99:7b:de:a4:6c:a6:04:89:f4:57:cc:5f:38:
         40:7b:da:09:0a:d3:6d:3c:3d:6b:b8:eb:d9:4a:41:e8:63:4e:
         55:7c:ac:d3:94:74:85:8a:01:c8:e2:82:20:ea:52:59:51:57:
         15:04:43:0c:f9:ed:c8:ad:f3:e2:ac:cb:e4:b9:c7:3f:1e:9c:
         b4:01:68:40:be:fd:43:da:a5:75:22:bc:fb:29:d8:5e:29:a1:
         b8:2e:b2:2a:33:c4:99:e4:4f:e5:fd:55:d7:d4:fb:a6:9f:77:
         f1:af:1c:bf:50:3f:59:5c:7f:58:48:b6:5a:2d:97:91:98:20:
         78:0b:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:48 2025 by rpki-client