Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/671ffad3-d2a3-36df-8deb-641dbc034f5b.roa
File:                     671ffad3-d2a3-36df-8deb-641dbc034f5b.roa (raw, json)
Hash identifier:          tPUjaxI5EHK3grwoz4owwqfxrCO7ILNFDd85GW07LU4=
Subject key identifier:   A8:42:18:7B:DE:83:99:9E:79:74:42:E4:74:35:C6:5B:89:A4:1B:F1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C43F995FE8DEFF67630500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/671ffad3-d2a3-36df-8deb-641dbc034f5b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        151.101.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:3f:99:5f:e8:de:ff:67:63:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=9b1b6125-f2e8-44ba-9376-a6f5ccb429d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:fa:eb:88:9d:1a:b1:3a:b0:55:00:f0:5c:
                    24:d4:4f:3a:9e:f3:f3:f0:f0:a4:38:99:10:60:31:
                    3d:13:6f:c8:b0:0f:29:f3:97:7c:6c:13:6e:66:60:
                    64:03:7e:4a:2f:4a:af:5a:fc:95:9c:59:fc:51:86:
                    79:15:b7:e2:6b:7f:68:e9:7f:97:1a:75:97:9e:ce:
                    56:42:e5:f0:47:c9:0c:07:0d:23:2a:ef:96:53:dc:
                    2a:82:a3:aa:c1:1c:a9:0e:95:1b:cd:44:f2:29:46:
                    86:86:be:85:d1:34:54:9a:15:15:f0:94:16:c6:d0:
                    cf:cb:9e:41:4e:aa:2d:8d:25:ac:fe:99:77:3b:14:
                    ca:82:70:0f:b7:3a:b7:fe:13:00:8a:c4:e0:44:1b:
                    8a:44:9d:69:59:7d:84:71:00:6b:c3:87:d9:c8:e0:
                    35:1b:12:24:4b:cb:1e:a2:c1:41:c5:1d:e7:b6:cc:
                    fe:f7:36:f6:d4:17:07:68:1b:52:df:e4:3c:08:f3:
                    51:64:f4:a3:26:e7:83:52:81:dc:35:d9:f8:26:75:
                    a3:6e:e5:78:d7:34:14:79:32:cc:ac:89:58:e2:18:
                    a0:bb:a4:4f:98:de:c8:13:7d:4f:52:09:9c:27:27:
                    be:3e:ad:8d:c1:f2:8e:81:e0:ca:49:22:6f:dc:68:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:42:18:7B:DE:83:99:9E:79:74:42:E4:74:35:C6:5B:89:A4:1B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/671ffad3-d2a3-36df-8deb-641dbc034f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:28:14:01:20:6d:56:11:20:36:af:d3:44:82:3b:12:90:
         fe:17:c9:af:b0:88:c8:c2:d7:b8:3a:84:a9:e7:3e:f8:0d:74:
         d6:59:ab:e8:da:40:44:a4:25:0f:a0:40:7f:97:77:7f:ad:a8:
         7a:9b:b1:95:31:5a:08:02:57:af:d1:b1:7a:63:63:1d:54:e2:
         a0:d3:fb:b3:38:cc:63:30:e1:36:10:62:5c:cd:42:e4:85:ee:
         b1:37:e9:47:0d:e7:3c:89:44:dc:39:31:10:b1:5f:8c:46:4e:
         e6:9b:57:8c:6f:18:51:39:26:0b:bc:ec:90:5f:38:39:a7:14:
         51:7f:fd:ac:75:fb:e5:26:e5:28:91:25:98:ed:fe:7b:55:85:
         9d:57:ed:e5:de:9b:73:a0:c6:a6:3f:1a:6b:27:0d:34:fb:63:
         1a:d8:45:6e:b4:5f:2c:8a:17:85:77:16:8c:2a:9e:d9:ff:59:
         7d:b5:96:c6:1b:f5:93:dc:e6:ac:87:5f:ed:fa:d9:17:b4:47:
         59:ed:6b:3a:f7:40:25:89:e1:3f:53:45:bb:11:c0:8f:35:07:
         b5:10:f8:54:b6:46:de:76:2a:3d:ca:ed:50:89:ee:44:f9:a6:
         6f:26:14:5c:d0:f8:b7:d2:3e:cc:9e:0f:45:44:2e:83:5a:24:
         09:de:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 19:26:23 2025 by rpki-client