Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          4W/CmQS6tAVheD0zEVqz/jxaXdylwEm2jj9qZg7koR0=
Subject key identifier:   12:F9:54:95:62:19:DD:AA:31:7D:4F:6D:BA:76:D2:00:19:56:24:C1
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F43285848A996297248F26C7A957897C0
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:29:72:48:f2:6c:7a:95:78:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=2da1d2ba-c6a5-476b-b5a0-8c9082fb42a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:91:9d:ea:65:1c:84:c4:00:0d:fb:6c:b1:
                    6a:ab:ee:e0:8c:31:24:f7:06:2a:a3:1c:8d:97:4d:
                    31:78:02:87:d6:f7:59:34:60:91:b5:6b:6c:9d:b2:
                    2f:ea:61:67:5d:f1:6d:45:bb:b7:75:b7:16:a9:1e:
                    53:9d:ef:80:7e:82:b6:fd:b0:38:17:89:f4:de:47:
                    68:88:e7:5c:e1:48:0c:52:e2:ed:29:70:e1:1c:62:
                    3c:9d:bb:87:0a:03:46:6b:f0:13:57:9d:10:a5:b9:
                    11:5e:6f:40:01:0d:3c:05:6a:5e:7d:84:b5:3d:93:
                    13:f7:d5:58:c3:ba:1c:f9:3f:82:6b:52:ef:32:9d:
                    75:de:f8:1d:c5:77:a3:74:70:c0:02:c2:20:cd:81:
                    cc:9e:60:45:3e:32:54:cd:57:f7:71:53:01:da:a8:
                    89:74:16:e2:13:7d:92:bb:08:e3:70:5d:f3:19:16:
                    32:b1:14:d6:4a:61:af:4d:1b:6c:bc:9b:22:2f:40:
                    a8:61:82:9e:24:ae:96:87:6c:4d:42:6f:b2:fc:73:
                    5c:8c:6c:5e:eb:4e:2e:8d:81:92:0d:6a:2d:ff:5e:
                    cf:52:de:e7:b0:42:f9:b6:48:51:4b:5a:37:b1:bf:
                    54:ef:62:43:bd:6f:8a:07:fc:8f:39:0d:fb:3b:55:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:54:95:62:19:DD:AA:31:7D:4F:6D:BA:76:D2:00:19:56:24:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:a4:21:2d:36:8f:2c:25:11:63:28:3c:95:8b:8c:e2:d0:
         88:4e:95:58:07:71:21:4b:f4:e1:77:c7:ca:03:43:d1:be:23:
         c5:8a:5b:64:06:82:4d:de:32:33:8f:ba:89:a5:2b:d3:dd:e1:
         31:6c:92:06:6d:c7:e0:23:5e:cf:0c:a5:2a:64:79:1b:c0:a0:
         61:93:cc:7d:fa:2e:db:cc:73:10:aa:6a:24:93:ea:3a:ab:6b:
         25:49:e3:98:cd:38:48:55:52:0f:f7:12:39:09:31:ff:5d:5d:
         6f:d1:0f:86:c0:62:bb:21:4f:f5:91:1a:98:b4:16:01:df:7c:
         da:6e:40:6f:89:3a:f7:0b:ba:f3:5e:e8:b8:28:11:b7:08:b1:
         bd:9f:ff:e1:ac:f1:29:53:0d:a0:7e:8e:c9:6e:ce:36:3a:6a:
         43:86:c5:c4:b6:b4:55:a8:e2:db:70:9b:e5:5a:15:56:61:64:
         fb:bf:a5:e5:7d:25:e8:76:f5:55:12:40:f4:4f:ce:b2:fd:54:
         a6:ef:f1:73:80:1b:5b:ee:26:73:95:b6:67:29:56:f4:0c:ee:
         8f:67:a1:66:26:72:30:fc:29:dc:7d:68:f3:28:c1:9f:f3:ad:
         43:75:a6:c4:2e:cb:bf:74:87:27:b5:3d:da:14:dd:33:a7:e9:
         2a:42:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:54 2025 by rpki-client