Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71a09f38-653e-3055-9aa2-8caafdca9218.roa
File:                     71a09f38-653e-3055-9aa2-8caafdca9218.roa (raw, json)
Hash identifier:          OGIq7ouoDbe5CJHx2L2E2565qllP4FffAevCAE05klc=
Subject key identifier:   86:0E:41:53:3F:FF:F1:E0:39:39:8D:6C:74:0E:1F:CD:33:48:7D:EA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C445D887344F464D74EDB4
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71a09f38-653e-3055-9aa2-8caafdca9218.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        151.101.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:45:d8:87:34:4f:46:4d:74:ed:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=80b09c3f-52fa-4616-98be-1ae4ebdcde35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:5b:bd:9e:8b:43:22:be:96:69:96:c8:c8:
                    b6:42:3e:5b:96:42:85:f5:87:80:d8:a8:31:1f:af:
                    6d:eb:7e:20:1a:56:f5:71:55:de:89:b2:39:8a:dc:
                    76:4e:ca:b4:c9:aa:97:6c:b4:04:6a:2b:b4:a9:8a:
                    c4:57:a9:87:73:e1:a0:57:35:47:c9:22:50:ec:e9:
                    da:03:63:8d:1f:8b:2f:1a:0e:61:7b:57:bb:38:84:
                    b8:c6:65:c5:b6:cb:8d:dd:d6:2f:cf:9c:a8:16:f2:
                    cf:0d:4b:50:3b:9f:2f:a2:15:23:78:2a:c3:ed:85:
                    30:ed:7c:4d:71:16:74:3b:84:da:66:0f:14:21:74:
                    7f:23:37:39:0e:07:d5:17:5d:c1:39:7b:c4:de:8a:
                    9c:a8:82:7f:04:17:ef:f5:24:5c:09:23:50:97:22:
                    7a:41:a2:cd:45:25:d3:a1:ac:54:b8:b4:f5:59:ef:
                    3e:f0:71:bc:7a:23:6e:3d:cf:96:5c:e2:10:45:55:
                    6a:e9:57:1f:c7:98:df:b9:b2:93:5e:de:e0:60:b7:
                    cd:89:29:d0:91:df:be:00:7d:46:c0:9e:ef:4d:bb:
                    06:b3:08:95:07:39:a3:27:15:9d:6d:4f:12:05:59:
                    77:06:f8:a8:5f:8b:0e:4b:82:9b:61:24:5c:17:05:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:41:53:3F:FF:F1:E0:39:39:8D:6C:74:0E:1F:CD:33:48:7D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71a09f38-653e-3055-9aa2-8caafdca9218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:49:6d:50:c6:fc:dc:4f:da:f9:9e:87:70:a4:0d:d1:84:
         3a:42:be:0f:5d:cb:a0:1e:7a:fb:41:0a:6f:dc:3c:ac:67:7b:
         eb:10:40:17:8b:e2:8a:32:40:0c:f0:57:01:96:81:d7:08:5e:
         29:23:7c:67:88:eb:9c:14:c6:f8:64:a1:b7:aa:0f:0d:64:81:
         3d:5c:fa:2a:09:cb:90:4e:34:cb:81:77:f4:3b:28:b2:27:83:
         73:91:a4:b8:9d:04:7b:6c:35:aa:a7:a9:32:18:aa:1e:16:4e:
         09:ec:a9:7e:c4:81:e4:72:00:be:a1:69:2b:98:13:b6:75:23:
         7f:d9:b8:75:8c:34:d7:22:1e:01:bc:5f:3b:2f:99:8c:49:0d:
         63:f0:e0:ed:c3:28:cf:6f:f3:76:90:be:1a:c7:67:f6:ea:24:
         1d:31:87:27:b9:f8:63:c7:19:40:4a:7c:46:b5:ea:17:f5:6d:
         15:a5:51:3c:b1:c6:cc:73:19:a0:0c:dc:fc:5d:61:a2:38:13:
         96:3f:d9:41:0e:ea:a4:ad:ab:e6:ae:42:5a:8c:9b:43:b7:c4:
         21:92:24:03:89:cc:03:d2:8c:43:68:ab:6f:f7:56:4f:fe:90:
         6b:0b:f4:0f:7c:da:56:a6:87:1e:ef:c2:b0:6c:77:40:cc:4c:
         23:22:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:00:30 2025 by rpki-client