Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa
File:                     3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa (raw, json)
Hash identifier:          6YeaNcCH/0jCxSHGBztjKTPX98dCEEaTT+b/8A4y/FY=
Subject key identifier:   B6:2C:6D:50:4B:8F:BA:31:18:EE:03:E6:BD:ED:4C:F8:7D:9B:42:59
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C434BCECBFA767F510F980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:34:bc:ec:bf:a7:67:f5:10:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=92a37dc4-fdae-4560-be48-c67906b085e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:58:8c:70:1b:e5:a8:60:00:b1:a3:b2:ff:
                    a5:86:d0:1e:95:ad:a9:31:d2:68:7f:7c:47:83:e5:
                    fe:3e:38:80:6c:32:b0:b8:1a:a9:b6:dc:57:6d:1c:
                    f3:db:c9:94:c4:79:7b:dc:4f:f7:65:16:64:74:ba:
                    b0:40:8f:64:a0:b2:93:3c:2e:dc:65:c3:ae:de:1b:
                    f5:a4:b2:e6:6d:98:1f:1c:29:4d:23:40:41:0a:3b:
                    c0:c0:00:86:4f:e5:9d:6a:46:48:85:dd:cc:3f:56:
                    3d:6a:4c:40:89:86:c6:4e:31:12:df:46:37:5d:1a:
                    6c:52:58:8f:1d:1b:fe:fc:d1:46:d1:2b:24:8e:c6:
                    e4:97:5e:37:3d:4d:53:8c:e8:85:5e:3a:8c:53:73:
                    7d:67:b1:a7:a4:9d:be:c6:a9:04:57:bb:93:c1:2a:
                    28:42:fa:b2:b4:de:b3:bb:5e:b5:18:65:d6:27:4a:
                    0e:ed:05:5d:0b:34:4e:4d:48:22:d7:49:d8:f8:72:
                    0a:df:b4:12:3a:c0:22:36:fa:e9:d9:22:3b:6b:63:
                    a6:76:98:7f:b1:5f:c1:25:da:6b:40:51:7f:91:29:
                    10:8d:e6:4f:2d:6e:2e:2a:d2:c5:73:ad:86:97:99:
                    a5:a9:ff:79:75:80:39:4d:d6:fd:e2:3c:cc:44:80:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:6D:50:4B:8F:BA:31:18:EE:03:E6:BD:ED:4C:F8:7D:9B:42:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:6f:8a:89:a9:9d:8d:e3:8e:b7:a1:62:84:60:8e:7f:53:
         52:97:9f:bd:30:f1:73:a5:9f:85:3c:8a:0e:a9:19:0e:bb:ba:
         e2:a5:a8:87:b0:b0:e5:53:81:28:ac:37:0c:27:22:7e:e4:cf:
         60:7a:43:26:83:a8:1f:a1:a8:71:c3:f7:0e:63:aa:87:81:f8:
         66:f0:4f:27:45:c1:df:cd:1a:1f:96:91:ad:61:05:34:cc:32:
         db:7d:8a:52:09:5a:56:f1:30:d8:ad:25:b8:7a:3c:13:bc:05:
         3b:1c:46:58:25:6f:11:b0:ce:f5:66:ef:21:34:88:9f:41:d4:
         06:65:1d:49:d3:a7:a5:40:bb:31:42:fd:59:d0:a5:04:c3:3c:
         e5:3f:1a:a1:8e:41:e8:20:99:d4:4c:dc:44:99:41:46:91:47:
         e4:9d:72:e1:31:b9:60:30:d1:4c:ac:65:26:83:16:c5:ef:af:
         5b:b2:00:d9:08:33:d9:a2:9a:ce:ad:75:62:49:2c:6c:da:81:
         6f:1b:3d:f3:fb:cd:1c:17:d3:19:fa:27:50:26:aa:25:b9:1a:
         b5:fb:da:6a:a4:ad:f8:30:f8:b4:89:82:fb:65:b8:6e:95:92:
         30:60:e0:0d:3a:39:56:4b:00:08:5b:73:67:46:61:48:c2:21:
         91:35:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:53:41 2025 by rpki-client