Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
File:                     841bdf52-afcf-38d3-8523-7e5074f81419.roa (raw, json)
Hash identifier:          iq9n0c6UiwfevSHuTVun0aaZE5c586PpZU3ze+ZCC0s=
Subject key identifier:   FE:7C:D6:71:68:FD:02:20:5E:12:C0:48:DF:89:58:75:80:9B:A2:57
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42B3605D59EBF2C363000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.210.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2b:36:05:d5:9e:bf:2c:36:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=84f44c1b-7d75-467e-9677-53fb5956b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8d:d2:3e:51:fb:c6:7b:c7:38:49:d0:d8:b2:
                    65:99:28:1c:ab:a8:cf:0d:24:09:d6:cd:0f:11:e3:
                    de:1b:08:f2:02:ed:64:20:e0:8a:f2:df:75:b8:70:
                    d1:d2:a1:90:64:05:4e:41:cd:b4:3e:88:87:1c:db:
                    2c:f0:a4:61:18:61:23:c3:66:ce:f2:0e:e7:fa:87:
                    0c:62:b4:90:1e:8f:ca:0e:db:1b:0b:70:12:81:14:
                    a3:ef:e8:45:df:af:c5:4a:48:e8:f3:db:8b:07:65:
                    95:29:42:b2:1c:36:04:ea:b1:03:28:58:87:73:29:
                    68:a5:ae:07:f4:6f:0a:4b:7d:86:2f:be:62:ee:17:
                    a6:26:38:57:3e:64:0e:f4:cb:fc:aa:f2:b9:99:bd:
                    39:6a:4b:97:16:26:5a:7b:45:c7:93:4f:11:3b:5f:
                    12:82:1b:e1:94:c9:34:26:83:33:d0:32:2f:8a:26:
                    0a:16:4d:cc:2e:27:0d:ab:47:23:36:9d:fa:ec:6e:
                    35:a2:21:05:90:3f:27:d7:d8:1b:88:68:79:ea:38:
                    21:73:24:a3:09:86:c0:98:39:1d:35:24:b1:52:7b:
                    5c:c9:6f:e7:3e:a1:80:5f:2c:24:fa:7d:49:8d:b1:
                    8c:a8:08:32:18:c9:68:92:29:8b:57:c3:7d:1f:af:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:D6:71:68:FD:02:20:5E:12:C0:48:DF:89:58:75:80:9B:A2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:0f:25:7f:7a:45:d7:77:fc:31:24:82:a1:7a:e6:9a:46:
         bf:db:3d:cb:49:66:41:5a:0d:53:36:68:d3:7c:f9:8f:d2:b7:
         7b:b1:1d:cb:4f:f4:c6:12:df:03:41:c0:20:5d:c5:25:3e:8b:
         b9:c2:aa:af:af:71:ac:4b:5d:2b:49:4d:91:91:bd:c8:d2:1a:
         25:d2:ca:74:f4:26:95:fc:e1:ef:1d:bf:98:05:97:3d:1b:f8:
         15:48:35:34:9b:24:f0:b8:43:19:18:4a:f0:e3:ef:d5:a4:0b:
         ed:d5:e4:5d:46:84:a4:bd:d9:55:a7:79:a7:c3:c3:8c:b9:73:
         5b:39:3d:21:50:a6:4a:34:9c:eb:0f:da:49:cd:b8:3c:ae:d8:
         c7:1e:26:4b:a7:31:62:7c:b3:5d:50:e6:33:c2:03:79:f9:96:
         cf:68:2e:a1:2d:d6:99:3f:cb:60:f1:4f:f9:58:14:e5:75:d8:
         88:71:0a:62:2b:e2:f4:67:d7:1b:5a:8e:19:77:90:e4:1a:75:
         23:ab:33:74:97:98:b3:95:ab:80:89:03:27:82:27:8f:2e:05:
         fe:dd:b1:b0:62:8b:9f:de:4b:06:7c:3d:bf:ae:b4:f0:73:be:
         65:92:d1:cf:20:1f:da:0b:41:6e:27:08:fe:22:5c:89:11:5c:
         43:8d:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:20 2025 by rpki-client