Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6be6a464-4c72-3b35-9d4b-1ae93a83679a.roa
File:                     6be6a464-4c72-3b35-9d4b-1ae93a83679a.roa (raw, json)
Hash identifier:          xyhPCwZNdO6TJRRHy6qJTWqvUz8kHCcrP9/f1rL8t0Q=
Subject key identifier:   8B:16:2B:35:17:80:0C:25:0E:10:9D:70:A5:D5:D2:86:4B:1F:C5:F4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C44095F68568FB14455400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6be6a464-4c72-3b35-9d4b-1ae93a83679a.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        151.101.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:40:95:f6:85:68:fb:14:45:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=924ec62f-ee28-4a66-ada2-840599ea4eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:63:1b:6e:ac:39:fa:df:87:d9:b0:46:44:
                    85:0a:6e:91:e4:e9:e8:33:af:bf:dc:0c:4b:1a:ee:
                    29:0f:a6:b9:c7:de:dc:39:78:da:0d:8f:59:f9:89:
                    3c:73:29:06:24:55:10:25:2a:9c:22:b4:53:b0:08:
                    a1:c9:39:92:25:45:91:b6:b2:66:5b:07:89:a0:96:
                    dc:7e:05:dc:37:6a:77:c1:44:66:fd:5b:84:53:05:
                    e8:76:60:ec:e8:7b:e8:5e:cc:57:fb:dd:72:2d:bc:
                    77:37:c4:4e:4e:7d:90:19:f6:25:10:77:fd:cd:3f:
                    c2:24:f3:f9:9a:39:8e:b5:88:c8:af:77:f8:d2:3f:
                    5f:4d:8d:d5:67:c2:f7:6e:12:94:1b:c4:33:7c:27:
                    25:0e:44:54:d1:1d:0d:e8:39:76:a2:3f:31:91:52:
                    13:5c:6d:aa:0c:67:23:34:8e:c5:16:35:b1:03:6e:
                    87:83:84:61:27:b6:ea:7e:2d:ca:43:25:96:9b:68:
                    b9:ab:cd:6f:43:75:b3:b6:90:32:15:4b:45:ca:4f:
                    d9:4c:c9:15:25:f5:51:2e:69:c3:ae:a4:6e:7f:bd:
                    e7:09:2c:a2:0e:7a:44:8a:e3:51:dd:e5:1e:43:22:
                    c3:a9:ee:29:61:56:6b:e9:d2:ef:1e:04:df:09:76:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:2B:35:17:80:0C:25:0E:10:9D:70:A5:D5:D2:86:4B:1F:C5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6be6a464-4c72-3b35-9d4b-1ae93a83679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:71:4e:65:87:bd:fb:00:92:cf:ac:ef:6b:df:82:87:5d:
         78:4e:8d:ed:0f:31:f1:38:44:3b:c9:22:88:e7:5f:e1:20:56:
         4b:66:43:c9:75:49:70:12:1c:0e:03:1f:fa:93:3f:d2:ed:a6:
         ca:95:e7:04:da:41:19:3b:1e:04:be:75:6b:37:76:09:1f:48:
         74:f3:2d:f9:3c:87:75:8d:d3:7c:fa:37:ce:47:1c:fa:cd:02:
         95:33:77:29:ce:2c:7c:6a:6b:71:aa:a2:ae:f1:4e:2a:d1:8a:
         4f:6b:55:d3:9e:84:08:29:16:7f:22:19:32:c6:eb:45:9c:0e:
         22:fc:ed:9d:0c:fb:0b:d9:cf:4b:ed:b5:7f:87:b4:2c:2f:f5:
         04:a0:e4:1a:4f:8f:3f:ec:3a:49:1d:2f:fe:cc:4b:20:f2:b7:
         df:1c:9e:55:1c:19:43:f6:c6:ee:23:7e:66:b5:e4:01:2e:75:
         37:c7:5a:c1:7b:af:a6:88:1d:a1:fd:09:f1:5a:d6:6f:48:04:
         fe:9c:cf:c2:c6:e0:50:c7:d2:a2:f4:2a:aa:01:9c:9e:4f:4f:
         5e:35:1a:8a:9a:c8:b7:47:eb:7c:22:9d:37:7b:aa:27:ea:0b:
         24:71:00:86:e5:3b:4c:ba:f5:33:92:7c:c5:f0:68:1c:96:1d:
         7e:78:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:53 2025 by rpki-client