Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/70c757bb-09f9-3db0-b12a-0a2ea9a2c48c.roa
File:                     70c757bb-09f9-3db0-b12a-0a2ea9a2c48c.roa (raw, json)
Hash identifier:          gyKB9GlqsBCeYt5lyuQSUzcfke9jAb2WFwoPnqo3Y7w=
Subject key identifier:   59:B5:A7:37:B5:30:94:E1:E5:15:54:B2:26:F6:4C:0A:5F:BB:17:A7
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C430C6AC4334F56F8DEA00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/70c757bb-09f9-3db0-b12a-0a2ea9a2c48c.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.250.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:30:c6:ac:43:34:f5:6f:8d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=7626f940-dda2-4f2d-86e2-a2a39f4542b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:1b:db:ce:fb:8f:ec:3a:73:2c:47:d9:57:
                    43:f3:51:6e:77:1f:c9:ec:44:33:56:40:e7:c1:47:
                    fb:0a:ce:5a:37:4d:72:85:54:c9:c5:0f:43:24:6c:
                    2a:1a:72:75:b2:9e:3d:06:6c:c7:7e:1c:e9:7a:0c:
                    52:cc:60:84:79:3c:2c:0c:36:a3:a0:ab:c3:3a:c8:
                    7a:dd:4d:1c:ca:65:9d:5f:fa:68:1d:ab:8c:69:b8:
                    06:d6:a6:89:07:39:ab:2a:57:a0:3d:4a:c6:79:75:
                    d9:dc:64:8f:c6:6f:7b:5e:62:85:8c:a2:59:43:7a:
                    00:cf:6b:00:99:1d:28:82:7f:97:a0:ec:75:7c:e9:
                    cc:58:a8:74:96:c6:ca:90:58:ad:e9:87:0d:95:2b:
                    72:0d:bc:7e:21:e1:a6:64:ab:97:44:53:97:e2:3c:
                    b3:5d:18:9c:ed:09:26:7a:96:23:8a:88:c4:37:25:
                    ae:ef:ca:88:e2:44:ef:bb:7b:f2:b7:ca:67:47:5f:
                    4d:4a:79:60:da:ba:94:73:86:58:ed:7f:f3:a2:72:
                    5d:a4:cc:0a:b2:78:b8:c9:ab:d8:e0:bf:f8:fa:a2:
                    66:e9:cc:85:d2:d4:5f:b4:71:1d:8b:07:2b:38:3a:
                    69:5a:14:eb:e9:61:8f:86:da:1b:34:f5:27:80:15:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:A7:37:B5:30:94:E1:E5:15:54:B2:26:F6:4C:0A:5F:BB:17:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/70c757bb-09f9-3db0-b12a-0a2ea9a2c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.250.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:62:c9:5c:11:4a:95:d1:3f:ed:26:90:35:42:42:a4:18:34:
         23:ee:77:df:72:4b:a5:e8:2b:b7:d2:a1:3a:9c:7b:fb:21:1b:
         a5:1b:2f:91:3f:81:47:e9:5c:ea:63:9e:66:54:e4:e9:b0:ad:
         4e:55:2b:ff:e9:d3:12:5b:21:9b:7c:ff:a4:73:89:88:18:c3:
         ca:5e:48:d6:28:62:d2:ba:8f:99:b4:2f:51:9b:34:03:93:c4:
         d9:92:c5:bd:45:48:05:35:c9:28:dc:ad:e3:9d:af:a2:e6:d6:
         e5:c3:22:48:80:b4:c5:aa:3e:a0:c4:ab:6e:14:02:29:5f:29:
         ed:80:3a:21:6d:3d:aa:69:37:76:b4:8a:c6:a6:8f:68:e3:1e:
         39:f9:72:32:e2:3f:9b:39:28:01:2e:45:f8:15:03:83:55:72:
         2f:bc:a4:cf:4b:1d:5f:d7:fa:eb:a1:54:37:1e:9b:a4:44:09:
         7a:a9:29:3d:b5:d0:7e:78:e6:f5:6a:59:0a:0f:d4:15:65:d4:
         54:cd:94:c1:22:4f:b6:15:d1:ae:7e:ec:d6:06:73:99:dd:e5:
         e3:e4:1d:a8:c6:ad:e0:62:48:0d:76:1f:a0:23:df:f7:af:cd:
         f2:53:3f:29:a3:64:13:e3:0c:29:59:a7:06:81:7e:b8:b1:80:
         f7:80:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:54 2025 by rpki-client