Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01fb0532-6161-35c0-8094-0eec4b2e5fa7.roa
File:                     01fb0532-6161-35c0-8094-0eec4b2e5fa7.roa (raw, json)
Hash identifier:          8pOl3ooWJXAT3pETT9tChqUDVJt2b/pYUjkoYHhUdhs=
Subject key identifier:   68:2E:28:8A:70:51:5B:3F:98:28:10:19:8F:D2:CC:83:B5:E6:C9:7A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C429F519D6CF32166A5C00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01fb0532-6161-35c0-8094-0eec4b2e5fa7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.214.0/27 maxlen: 27
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:29:f5:19:d6:cf:32:16:6a:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fce77701-13f6-49af-8f18-b8c00e66ef0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:ab:62:4e:19:24:f7:1a:c5:84:82:0b:ff:
                    4d:11:95:52:14:0c:82:7f:34:e2:ca:18:5a:6a:1b:
                    ee:a7:94:3f:86:14:38:46:e3:06:71:a3:36:88:4f:
                    1b:9f:20:a2:1b:f0:23:f7:28:77:54:89:c2:b2:79:
                    9e:99:77:c2:32:c9:eb:75:52:77:ac:a5:32:69:e2:
                    92:82:26:f9:02:78:1c:c6:3e:fa:fc:bf:73:38:97:
                    b3:73:73:93:1f:40:2e:48:2b:fe:47:9f:2d:0a:3d:
                    71:09:39:ab:cc:ed:4c:a8:69:fe:1a:68:a5:02:52:
                    f0:63:f6:f2:b5:74:68:73:e0:4c:f7:a4:a4:dc:4f:
                    bc:80:da:46:f5:68:4a:cc:52:fe:2f:ae:df:22:97:
                    cf:65:cc:f8:23:5e:17:6b:21:07:82:a4:f8:ad:09:
                    c5:b8:15:d6:11:0b:0f:22:8e:14:13:94:bc:2b:4b:
                    a2:84:0b:c9:13:0d:57:50:ec:4d:98:02:51:ed:4c:
                    21:8b:04:59:7c:f8:22:1c:8f:56:74:d7:44:b7:4c:
                    cf:bb:a7:f9:ae:00:83:26:1e:68:0a:04:d9:8c:e1:
                    99:5c:8c:dd:77:54:27:2f:3b:ea:91:7c:bc:41:4d:
                    0d:ae:56:f0:bf:68:2d:a7:7d:a4:03:f4:0e:5f:05:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:28:8A:70:51:5B:3F:98:28:10:19:8F:D2:CC:83:B5:E6:C9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01fb0532-6161-35c0-8094-0eec4b2e5fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.214.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1c:1b:24:02:d1:b3:e1:67:9c:42:6c:f9:7e:3c:ce:ee:6a:
         91:c6:52:c7:03:55:bc:d2:58:1a:c0:0b:9b:33:5c:07:15:fb:
         94:10:23:e7:8d:cd:1f:30:71:9c:a6:d5:e0:62:c9:6f:28:dd:
         ab:bd:f6:07:4e:31:a0:f6:9d:e5:b7:0c:bb:0c:a6:c1:5d:bd:
         10:75:0d:12:76:c6:dc:ea:16:57:0b:37:41:70:16:bd:5b:86:
         eb:df:01:ce:26:48:85:db:5c:c5:79:d4:31:90:98:23:8b:8b:
         28:f1:8b:ed:49:6d:1c:c9:69:c6:6d:f1:6a:2d:6d:fe:ec:fb:
         d7:12:6e:ed:37:bc:a0:95:f4:ff:c1:fe:3f:32:b3:be:97:a6:
         2f:15:35:67:67:c1:de:1a:ac:69:57:6f:a9:dd:16:cb:cb:f2:
         0d:f6:59:6a:bb:78:cd:6c:5b:2f:8c:27:be:bb:7e:02:ce:f5:
         06:c4:b4:ed:d5:ac:27:0d:19:97:77:04:83:31:f8:c2:4f:e5:
         9e:0e:e9:a4:59:fd:95:96:91:b3:d1:16:01:39:ac:a6:84:1d:
         da:f0:66:ae:41:a7:45:af:11:35:26:1c:30:d9:a4:cc:2e:c4:
         02:d9:76:f6:ed:38:ac:15:c5:3d:f8:89:58:d2:ca:d1:1a:ca:
         d3:82:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:57:40 2025 by rpki-client