Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
File:                     eba41c2b-e525-336c-96e4-eac49ea4d832.roa (raw, json)
Hash identifier:          lm9f9gTpou8e/BzCC2nnvw83J+KZFNgsGu3o8DSVDDU=
Subject key identifier:   6C:47:27:E8:3C:D4:0F:B6:72:F8:3E:4E:90:CC:42:9C:0D:D7:C5:E2
Certificate issuer:       /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial:       010D0C9F43285849244E894F480EAAB7FC5A8500
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     802
IP address blocks:        199.212.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:89:4f:48:0e:aa:b7:fc:5a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=31173e46-ed0c-470f-964d-6dc5654c11d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:a5:fb:f4:d3:98:c9:ec:58:19:62:78:31:
                    a3:1a:f7:6d:0e:ac:04:a3:87:94:8d:24:34:eb:d2:
                    84:0a:5a:a2:87:3c:df:8f:f0:4b:f3:b7:0c:86:df:
                    83:2f:5a:82:0d:00:c0:67:86:13:a3:d9:8e:a5:f2:
                    f6:06:6a:95:a9:ea:78:b9:96:f1:59:8f:21:84:41:
                    64:d7:8d:d6:34:95:8e:36:34:d7:ef:c8:5b:bd:a8:
                    23:89:97:e0:4d:be:0d:a3:96:ee:ba:14:d5:39:5f:
                    32:73:6e:ea:55:e4:11:88:1e:b3:a3:78:a3:5a:c3:
                    e7:f6:8f:c6:f5:6d:d1:3d:e6:a4:ba:74:6b:e6:27:
                    82:af:7c:f1:80:81:39:c8:41:aa:d5:d7:d3:90:d6:
                    c9:5e:6b:dc:e8:c4:df:c1:c9:6d:8f:b5:4c:d6:22:
                    76:9e:71:7a:59:d8:bf:a7:94:e4:5d:c3:0e:13:c4:
                    54:ca:a1:50:51:5d:a5:80:42:23:10:20:ec:be:68:
                    4b:6a:ed:44:f8:cb:5f:b5:2a:f2:79:50:95:3c:00:
                    c7:43:1a:b4:5e:8c:32:42:35:24:67:fb:fb:92:6d:
                    3e:26:9a:53:dc:de:e5:ea:de:d1:77:ac:b7:86:80:
                    1d:80:be:bf:3e:9b:c7:3c:ee:04:df:af:d5:59:53:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:27:E8:3C:D4:0F:B6:72:F8:3E:4E:90:CC:42:9C:0D:D7:C5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl

            X509v3 Authority Key Identifier:
                keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:93:ba:c2:a7:5d:a2:44:82:bc:71:79:54:94:a9:3a:0e:
         60:09:28:9f:e1:26:b1:51:03:8a:01:8f:93:e0:48:11:f7:03:
         bc:ff:3f:36:78:f8:38:ed:ae:66:d4:ac:a4:42:90:84:ea:11:
         a3:d7:5b:71:3d:c5:ef:d8:54:1b:ac:a1:14:65:9b:ac:8a:c9:
         93:11:3b:7b:ee:95:3f:99:58:62:3f:7e:48:d2:11:8f:f5:d8:
         3c:ca:7a:d3:ef:4d:3e:55:f1:2a:34:e4:d2:b1:a3:64:71:c2:
         e3:7b:b0:87:83:10:67:21:9c:58:18:b1:f4:e2:f4:8d:0d:ab:
         ab:e5:c1:94:db:da:92:dd:8a:65:75:4d:38:69:aa:c0:85:25:
         c3:6d:f1:c6:2b:23:37:5f:0a:b8:97:93:ca:31:ed:0d:ab:c6:
         8c:3b:fa:73:54:65:f8:a0:8f:5d:b0:77:ce:45:5c:8f:21:27:
         db:7f:d8:d4:8a:10:0e:07:6c:df:65:3d:79:e9:39:ee:f1:07:
         95:7f:c6:a8:73:82:48:a1:9d:fb:15:04:1f:2f:db:d8:b9:eb:
         6a:4c:5e:a8:b1:4d:9c:3e:f9:47:68:f2:f8:16:39:a8:c0:c5:
         8e:2a:9c:03:a2:65:68:d1:b6:10:30:1d:ed:f9:9c:b1:16:fd:
         52:27:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:28 2025 by rpki-client