Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8928f685-4213-3636-ad97-45c0aa79cd34.roa
File:                     8928f685-4213-3636-ad97-45c0aa79cd34.roa (raw, json)
Hash identifier:          z9tkN4qs1FZ8+eRzVZQ17+ULrQKbOzWNKw6ddMo0OxU=
Subject key identifier:   7D:26:1C:84:14:7F:F8:F7:6E:9E:0E:9C:7C:78:ED:38:8D:07:CC:D1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42E9D253E5B81ED0F6760
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8928f685-4213-3636-ad97-45c0aa79cd34.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        172.111.114.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2e:9d:25:3e:5b:81:ed:0f:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=72d3ce57-ebb4-41dc-959f-bcef925287d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:e1:d8:cb:a0:79:60:a0:06:ae:cb:3f:29:
                    ab:ab:61:2a:9e:56:26:39:7b:99:06:d3:f3:12:72:
                    a8:b6:b6:49:ef:ac:e9:da:4a:da:1a:4f:c2:b3:c7:
                    42:7e:5b:94:70:15:e8:0d:74:44:5c:3c:ac:7a:19:
                    6a:9c:2b:6f:e3:1d:48:8f:c2:28:61:71:32:13:46:
                    f8:d8:0b:7f:11:6f:1d:01:21:02:56:74:e9:5a:1d:
                    8b:36:cf:23:96:52:b2:34:9c:ab:cb:f4:d6:e6:93:
                    bf:37:05:87:bc:97:da:d8:bf:9e:3d:30:01:d6:cf:
                    82:53:25:b5:ab:00:9d:b8:9a:1a:95:c8:39:bf:7d:
                    0f:3d:2a:21:e0:67:4b:46:35:4b:0b:56:1f:af:aa:
                    1c:ea:fc:2a:ac:80:6d:3a:57:8c:bd:1a:f6:d7:c0:
                    5a:84:e5:fa:36:39:ca:28:44:27:89:ad:d3:29:51:
                    9a:9a:d0:68:36:37:d1:fc:d1:53:93:12:cd:bd:84:
                    5f:5b:92:62:b4:22:99:5f:cf:19:ea:b7:20:45:33:
                    d0:80:a1:e5:52:a1:d5:c8:0b:79:fc:a9:c6:da:7b:
                    5a:a2:1c:fb:14:b0:9f:77:60:e5:42:4e:42:e4:cf:
                    39:6d:93:a1:55:0f:06:eb:90:49:01:12:b9:69:8d:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:26:1C:84:14:7F:F8:F7:6E:9E:0E:9C:7C:78:ED:38:8D:07:CC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8928f685-4213-3636-ad97-45c0aa79cd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.114.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:bb:95:ed:c1:3b:fc:ba:e2:c0:33:c9:c2:fb:17:9a:b2:
         1b:8c:5b:47:73:0b:5a:6d:d6:5f:e7:03:59:f0:a7:6b:e1:1c:
         0d:40:6c:7c:34:ea:76:b2:df:0b:1c:d4:7c:59:fe:a9:06:52:
         26:37:f1:d3:f2:0f:da:73:ec:6d:a4:15:85:a3:dc:fd:bf:d8:
         51:82:e6:9c:1a:8a:21:82:09:a2:b0:28:31:3a:b4:aa:22:2e:
         42:4b:67:0d:85:ff:ab:bc:b4:10:e0:43:88:25:92:de:66:ef:
         7c:1a:cb:8c:ef:5e:50:d6:4a:d9:fc:80:e8:b7:c7:67:d7:fe:
         43:0d:5e:91:1c:5a:3d:3a:77:ff:35:82:36:16:5a:6f:54:e9:
         8a:34:0e:f5:e3:67:fa:30:4a:35:3e:d0:f6:4c:c3:ae:c5:69:
         43:65:30:d1:d2:3a:13:1b:43:9b:d9:08:2b:ad:b7:f5:12:3c:
         db:96:93:bb:c1:60:a1:94:24:5c:9b:4d:20:81:ef:3a:f4:dd:
         5d:17:46:02:0a:61:5c:0d:9a:0f:be:3d:77:75:0a:78:87:37:
         5d:92:21:bf:3d:e8:de:e9:2e:af:b9:4a:c1:ef:1e:c6:da:8e:
         e2:f3:6a:b6:a0:0a:82:1d:36:25:43:39:38:90:ff:b0:72:c9:
         7f:68:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:18 2025 by rpki-client