Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa
File:                     b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa (raw, json)
Hash identifier:          YsIiRzIRDcbLlGwxGZUhVSsDfyezpbGbzWo+AIg3N8E=
Subject key identifier:   E9:FA:D2:50:77:0C:6A:27:B7:55:FF:BD:9F:3E:67:3D:52:C4:92:70
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F432858494CC94DDF9FA9EF7873BF3B20
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     19740
IP address blocks:        172.84.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4d:df:9f:a9:ef:78:73:bf:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=04e3d034-8aa8-46a0-92d2-b43d0bda611d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:5c:cd:b4:4a:b2:61:54:88:86:d6:11:29:
                    a2:1a:26:d6:65:f7:00:0b:75:05:57:0a:f2:2b:08:
                    e8:b3:91:2b:89:2f:e3:a9:7b:18:32:a1:5a:a3:a0:
                    84:86:1e:62:cb:e9:a3:8f:1a:73:a0:57:e5:89:39:
                    66:1a:de:34:03:51:5a:ad:e7:fa:54:cf:9c:f8:5d:
                    08:cf:af:b9:4e:5f:0e:f1:ee:2a:d1:26:28:c7:11:
                    a2:05:19:7f:df:75:56:09:c0:91:41:46:8a:86:88:
                    02:d3:40:b8:72:10:1c:14:d2:58:c6:dc:5e:42:8d:
                    8c:f3:ea:e9:eb:81:6e:f5:fc:29:d1:db:ff:86:a5:
                    30:3c:b7:e4:f4:b2:7c:a9:46:6a:bb:f2:90:d2:e8:
                    67:5c:ae:b8:00:ec:72:88:cb:a8:9a:5f:dd:cf:9a:
                    6c:3e:99:43:af:58:9f:2f:06:11:6f:4f:9d:ec:dc:
                    53:b3:56:bc:23:1e:35:9c:97:cd:55:88:61:e8:34:
                    84:53:ec:2b:46:7a:2c:0e:ac:42:fd:69:92:0e:fb:
                    fd:bc:de:01:7b:19:fa:e2:25:1a:cf:6b:3d:b2:b8:
                    1e:5e:9b:28:75:27:42:71:26:a9:0f:e1:dc:a3:e0:
                    13:04:a9:72:18:23:20:88:8b:53:88:bf:fb:44:01:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:D2:50:77:0C:6A:27:B7:55:FF:BD:9F:3E:67:3D:52:C4:92:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:58:7c:50:d3:c5:4c:be:7b:dd:80:89:d0:fa:fb:f0:b7:
         7e:e6:39:7d:fe:f6:ce:2e:6a:b6:b3:f6:3e:92:aa:33:b7:6f:
         b9:f6:21:3d:04:2d:d1:f7:54:0c:ea:93:8c:b0:cd:61:e4:10:
         91:12:5e:2a:41:c7:82:05:f4:fe:2b:8e:45:36:1a:30:94:47:
         26:11:fe:0f:4a:bb:6c:81:31:04:9d:6e:74:49:0f:90:32:20:
         8a:70:eb:5a:73:58:52:b8:1d:03:72:13:86:4e:8b:be:ef:a7:
         6a:27:f0:60:7d:49:94:5d:78:bb:6f:fc:a1:25:0c:20:31:8b:
         51:be:9c:ab:85:12:6e:96:a8:da:39:96:67:0e:d8:5f:11:40:
         f6:36:4a:73:fa:fd:40:fa:3a:57:da:d2:b4:46:d4:5c:88:0c:
         7c:32:6b:bc:a1:3c:75:6f:9f:99:f3:fa:04:f1:b7:35:32:9e:
         9d:63:9f:6f:00:e5:c2:b7:83:00:58:a4:e1:08:d7:15:b1:f0:
         80:d3:f7:74:a3:08:53:ee:32:8a:a9:22:12:ad:4a:c2:94:d6:
         da:69:6d:cd:10:de:ff:e1:b6:47:d1:02:33:e0:1a:3f:72:db:
         23:d2:38:07:bd:9d:52:19:fd:3b:2d:5f:e1:05:85:fa:df:53:
         de:8f:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:28 2025 by rpki-client