Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa
File:                     5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa (raw, json)
Hash identifier:          NsbeBvnKAbh0UBys6poI05xig3Rdrd5D/OG99uIulb0=
Subject key identifier:   5D:D7:78:D0:F9:4C:FF:74:DF:66:88:B3:76:FA:5E:3A:BE:43:B4:62
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584913AC39ECFCB4647000095900
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     33182
IP address blocks:        107.161.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:39:ec:fc:b4:64:70:00:09:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=e66ae268-7ab9-414f-a202-f1bbba36de44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:48:b8:a8:70:a3:d3:a4:c0:75:49:26:10:
                    44:30:ac:49:ea:47:01:75:f0:3a:63:36:10:21:7d:
                    11:2f:57:a9:36:ed:40:98:3b:f1:02:0e:0d:0a:05:
                    de:84:bb:7b:72:e5:07:02:d8:96:24:dc:4b:48:16:
                    da:e9:cd:26:be:85:04:49:e7:54:20:58:aa:82:73:
                    cf:91:92:1a:40:d5:13:ea:f4:26:58:ac:88:8b:89:
                    9d:5f:b3:6b:4b:85:cc:96:27:7e:4c:22:3b:26:44:
                    c0:c0:d0:84:d3:a1:f2:f1:1f:06:b3:04:26:ce:7a:
                    03:1d:0e:81:82:94:bf:99:95:96:9b:c9:5c:fb:6d:
                    64:6d:01:69:05:29:ad:7a:84:65:4d:1b:37:64:4c:
                    1a:83:8f:7f:43:22:50:f3:de:98:f2:a3:46:a4:d2:
                    d6:94:2b:23:de:3f:f4:b7:82:4a:99:27:de:bc:c6:
                    78:0d:86:5a:07:a7:2c:3f:54:1b:7f:57:0b:a5:db:
                    eb:d6:46:b5:49:8b:6a:fc:47:d2:46:a1:a7:3c:92:
                    0b:4a:ae:48:3b:13:f7:fd:e6:99:1b:f7:27:08:75:
                    48:7e:5e:f6:88:da:f9:8f:81:d2:66:b9:5e:25:bd:
                    54:f7:b3:3e:2a:d8:54:a0:97:5e:2a:42:db:f4:c9:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:78:D0:F9:4C:FF:74:DF:66:88:B3:76:FA:5E:3A:BE:43:B4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:f0:10:df:bd:98:fa:f5:77:0c:73:08:98:a1:fe:91:13:
         38:1d:2c:7f:89:be:c2:79:17:db:68:52:f9:4a:96:89:d3:c5:
         34:f1:c8:9e:1a:26:7d:81:1a:97:eb:9d:7b:19:b7:44:dd:50:
         4b:a5:aa:15:00:8a:b4:88:d1:95:04:96:f0:26:60:91:a0:16:
         cb:5e:1c:6f:09:c2:25:2a:7a:04:ad:3c:47:8d:16:7a:bd:56:
         d4:18:d4:4c:e8:11:61:34:21:f7:90:41:0f:90:18:58:81:3b:
         d9:6c:0f:88:50:31:ad:7c:04:91:fb:c8:09:81:f7:b4:25:19:
         22:d2:a8:ce:fe:3d:5e:17:de:55:50:e9:71:ef:20:18:db:57:
         d8:c9:9c:38:89:24:04:7d:a9:ad:2a:e2:b7:a8:d8:b0:83:b5:
         44:65:04:85:a0:79:b7:0b:6e:b1:49:3a:ee:08:cc:0e:0d:8c:
         67:f2:7c:86:49:9a:25:55:59:8c:7b:45:82:9c:35:82:94:85:
         ec:f3:03:39:f8:89:8e:7e:6a:d0:af:65:cb:91:aa:0e:18:21:
         a9:8e:30:1f:84:bd:e9:cd:31:87:44:69:f9:7b:34:f9:8a:73:
         da:09:69:68:55:d6:33:ed:c2:39:71:f7:18:90:bb:63:68:e9:
         f1:72:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:59 2025 by rpki-client