Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa
File:                     405bfda9-7a60-3342-b3c4-16580eae979c.roa (raw, json)
Hash identifier:          HNF4RcY2m/+u+f6RSFx7A42YIawecIiEcDyfs04t7t4=
Subject key identifier:   81:97:8C:01:A5:9A:B5:4C:30:CE:81:35:CC:89:B6:75:B1:FA:16:19
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F43285849287E68E563617980CBDC5600
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     46353
IP address blocks:        208.94.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:68:e5:63:61:79:80:cb:dc:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=bee1f573-3084-4325-9f94-58cfd9f181cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:cc:9c:fb:0b:e2:92:34:91:86:c5:2b:2d:
                    85:71:5e:da:ba:86:c7:1b:1f:68:f4:da:1d:bd:96:
                    92:ba:95:65:37:3e:1b:3b:8b:6d:02:9e:f8:7d:40:
                    90:de:c2:47:26:2b:0e:42:e1:58:ca:57:67:f0:69:
                    58:e6:b2:f7:3c:17:6c:a0:f1:6a:e1:8d:5c:df:4d:
                    11:d6:4c:8c:0b:5d:a9:65:3a:c5:18:e1:a9:df:99:
                    86:0d:a2:ec:f3:21:29:8a:d8:81:29:23:7c:f5:a7:
                    79:ab:27:cb:77:73:a7:1e:22:06:8d:a1:52:08:5c:
                    f4:8c:4b:76:09:83:71:0f:d2:7a:9c:c3:14:e0:2d:
                    dc:f3:7f:98:ba:c9:46:34:6f:2a:e1:2d:2a:a0:df:
                    32:9a:19:cc:83:77:3a:4b:7c:32:a9:90:02:80:46:
                    de:4b:4f:b6:66:72:7f:80:17:41:be:f8:cb:7d:91:
                    9e:91:5f:89:5d:55:fe:40:65:16:d7:7b:d5:41:4f:
                    bc:58:d1:43:d2:96:db:3a:82:56:5a:7c:84:40:45:
                    e6:9e:7a:94:6d:1c:b8:bc:9a:0d:a0:55:d5:6c:48:
                    2e:4d:e6:64:ba:fd:b2:4c:3d:ca:fb:46:f5:5b:a9:
                    5d:ac:c9:29:b4:8b:08:08:55:e1:85:03:f6:b8:77:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:97:8C:01:A5:9A:B5:4C:30:CE:81:35:CC:89:B6:75:B1:FA:16:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:d1:5a:a8:5e:6d:5a:cf:38:95:2e:40:91:1e:0a:1e:a5:
         21:e5:d4:0e:5a:28:1b:cb:6a:58:e6:7a:38:bb:73:26:16:46:
         6b:10:08:da:85:06:78:03:15:12:9f:9f:08:e3:0f:5c:c7:2e:
         16:fb:c5:1b:f5:51:cf:f6:e8:12:bd:39:d9:5a:1c:f5:ca:23:
         f5:a2:51:c5:3c:54:19:97:bb:6e:9a:21:df:41:fa:38:aa:a1:
         d4:11:11:f8:0d:60:3d:da:89:56:77:18:f6:21:5a:51:21:af:
         aa:2c:fa:5e:70:ed:d4:5d:c0:c3:4d:78:e6:7b:31:7d:a9:d9:
         25:17:31:44:ab:bd:11:8c:0c:eb:eb:68:a7:90:7e:71:5e:42:
         5d:5d:02:35:05:ef:51:98:b1:e5:b6:4a:3f:b1:27:2b:41:a3:
         63:48:20:d4:eb:3f:74:44:43:a5:3f:bd:7b:7b:49:60:33:52:
         c6:77:66:b4:71:87:88:dd:37:56:b2:9a:08:2e:99:85:4f:0e:
         c0:16:4e:7c:30:17:f1:80:7b:99:08:c3:c4:c1:37:da:26:3e:
         78:d2:b2:ba:2f:e5:b7:a0:1d:cd:1c:db:8d:22:37:61:be:15:
         7e:42:d0:06:9b:cf:40:c6:ab:49:4c:16:38:70:21:30:94:74:
         6e:01:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:57:33 2025 by rpki-client