Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
File:                     08ff9662-4609-3d2e-af6f-7a8538b797b9.roa (raw, json)
Hash identifier:          2vt+zpulkG54slvb5vJLkOFgCFDwYaK+EjaVb2LptU4=
Subject key identifier:   AB:FC:E2:C9:A8:4E:67:56:66:23:F5:BC:16:00:8C:DC:E0:C0:D3:2C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42FA26E7854CFE19E7198
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.217.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2f:a2:6e:78:54:cf:e1:9e:71:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=27787243-7919-4980-994f-d0550a4b0260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:e4:66:21:54:dd:15:34:2b:ac:29:31:3b:
                    fd:84:03:62:79:0c:39:e6:a1:8e:62:24:79:22:25:
                    43:ed:b0:ec:02:2b:e8:b6:05:bc:09:a2:7f:92:d8:
                    00:58:e5:c6:87:e9:ee:e6:13:51:0b:fb:aa:6f:28:
                    3e:a3:37:9c:72:ba:1e:e9:64:50:12:93:0c:b8:f2:
                    85:e9:a7:31:7c:78:85:83:7b:df:8a:e9:aa:28:fd:
                    dc:b1:53:66:4d:d1:32:e3:ec:f1:75:e9:b2:37:98:
                    96:e0:67:19:29:c4:73:15:ef:37:55:c4:b1:b7:15:
                    78:50:12:45:ab:50:0a:11:bc:9e:9f:46:2f:d4:0a:
                    41:52:e7:c0:f8:2e:15:e2:eb:c3:eb:2e:0d:df:e1:
                    72:77:4d:da:e5:13:1f:9d:de:0e:4f:e3:03:ec:e2:
                    d5:6c:7c:33:07:87:7c:9d:ba:65:2f:dc:a0:ec:73:
                    08:00:54:4e:20:bb:95:f9:7a:4b:36:46:4f:72:0d:
                    7c:75:14:3e:51:0f:53:06:e4:3e:7d:b2:46:f2:5b:
                    21:62:6d:97:c9:b5:9b:ac:cb:08:13:cd:a6:97:0d:
                    a0:5e:49:9e:1d:40:9d:e5:e5:91:80:a4:76:c1:86:
                    3d:ea:bd:c6:b4:3b:79:38:25:fa:f3:2f:c3:46:eb:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:E2:C9:A8:4E:67:56:66:23:F5:BC:16:00:8C:DC:E0:C0:D3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.217.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:e6:99:79:46:61:6a:42:28:7c:9f:5b:2e:75:df:cd:83:
         04:21:d9:41:3a:01:c9:df:a5:84:47:0b:20:ad:63:a5:d8:ae:
         f3:eb:a2:c3:dd:de:e2:38:46:ed:66:70:e8:a1:44:9a:61:a8:
         7a:b2:d0:86:2a:41:ac:8c:c3:90:57:61:60:71:60:81:d9:d9:
         29:45:dc:bc:2c:87:d3:44:cb:93:1b:5d:31:77:da:23:d0:30:
         91:80:dc:94:4a:d6:29:25:e6:bb:d1:7e:d7:35:89:d6:b6:e4:
         e2:f6:ae:00:f1:c3:db:19:9c:2c:db:4c:05:70:1f:81:1c:d8:
         7a:5b:ba:ea:c9:cb:bd:60:da:8c:02:36:9e:38:79:a7:b8:bd:
         a2:ee:64:78:f9:bc:77:0a:1d:f2:ad:66:58:2a:a5:e3:24:5a:
         f7:7d:d1:88:64:89:f0:27:f9:f7:ec:c7:20:bc:80:ae:a6:2c:
         8b:89:5a:51:15:73:34:5a:8c:24:ca:56:26:a0:02:df:29:6c:
         c8:49:39:a2:1b:82:18:a3:38:b4:de:d1:e6:22:84:6a:ae:bf:
         34:7c:d0:ba:7b:bb:34:0b:fc:b1:fc:44:9c:f9:49:9a:ed:b3:
         a8:cc:34:bc:9c:89:d7:2e:97:1a:63:75:0d:09:11:f7:ad:14:
         64:0f:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:03 2025 by rpki-client