Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa
File:                     cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa (raw, json)
Hash identifier:          0PmOyMkNWDgkbs13RzZWlraD7PsUw9aTzNFqi8zYCmA=
Subject key identifier:   B3:0E:34:A0:DE:E9:DA:A8:A0:23:A0:92:2F:33:AC:0A:08:B9:86:3E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849350EBDA50DEA3CC4016F6380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.236.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:bd:a5:0d:ea:3c:c4:01:6f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=ffc88cc8-75c0-4370-900e-25d93f45168e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:04:35:b3:8a:bb:8f:b7:5b:3b:d3:ed:68:
                    49:79:5d:55:fe:ed:ac:45:bc:1a:39:16:95:ee:71:
                    ce:68:fd:5b:cb:1c:f6:c2:4e:7f:bf:52:b4:ca:47:
                    da:73:4c:bb:f3:07:72:de:38:af:33:2a:ab:b9:66:
                    3d:34:c8:5e:0e:41:3a:4c:7f:cc:5a:b0:81:56:b4:
                    3e:77:9d:0e:f2:92:6a:20:b8:2e:df:b3:36:fb:b4:
                    20:c1:bb:0e:f2:e2:87:ed:3a:59:4c:01:f4:f0:60:
                    85:c5:bf:24:12:1e:c6:43:a1:a2:bd:ef:e6:0e:e8:
                    7d:e2:c2:51:b7:3e:23:c1:ed:4a:81:29:d1:1d:8c:
                    ff:4c:b5:84:07:98:ea:4a:dd:35:e5:ac:fd:47:c6:
                    e9:f6:ed:82:b2:26:12:8b:7e:c9:14:c8:05:56:e7:
                    7c:e9:1e:f1:7a:f0:0c:6b:ac:de:c9:5b:1a:77:be:
                    cb:04:ce:7c:ef:88:99:14:a7:0a:88:d9:37:f5:96:
                    4a:34:9b:e5:39:68:a3:7e:6e:34:5c:75:a5:ea:63:
                    88:87:da:1a:85:58:f9:c5:b6:11:d2:e8:96:cd:dd:
                    69:f9:7b:30:73:97:c4:33:ad:23:1e:5e:c2:c4:4d:
                    ab:0d:a1:02:8f:74:a5:a1:37:2d:80:8a:62:0c:27:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:34:A0:DE:E9:DA:A8:A0:23:A0:92:2F:33:AC:0A:08:B9:86:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.236.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:cd:23:3e:3d:39:92:a2:0b:d1:10:2b:a3:b5:9c:f4:15:
         37:eb:55:e9:f5:ca:76:88:3b:b1:ff:4a:30:7a:2d:f7:e3:1d:
         fa:27:1b:64:3e:88:54:4a:e8:4f:fe:e9:42:1e:a2:b9:0a:40:
         85:2a:64:bb:4d:89:0e:8f:01:12:5f:6b:31:d8:e9:ef:6c:cd:
         e3:1c:d7:64:f8:3d:7f:d8:e6:1f:32:5e:fb:46:1c:c2:f5:a6:
         16:f5:11:2c:94:86:87:ab:c3:bf:88:6f:82:15:68:1a:3c:73:
         46:bf:96:96:18:86:76:72:c0:68:e8:39:b8:f6:fd:29:8d:fa:
         6c:d8:67:0c:48:e6:46:14:8d:b6:4d:c5:db:ae:26:a8:bc:d5:
         ab:69:a2:a7:43:8a:80:9b:df:dd:c2:40:e3:d2:10:fa:12:e6:
         71:4f:17:a2:da:e7:09:55:fb:a1:e1:e4:80:94:e8:00:a8:c7:
         e0:eb:fc:05:e6:50:65:f5:39:d8:3d:5f:85:49:38:4d:7e:c9:
         c9:d7:6d:06:f0:d1:4d:2e:83:2c:ed:72:b2:8e:ff:c6:81:72:
         6b:0d:a8:b4:8d:54:dd:59:ee:0b:49:42:ba:8b:a9:ff:46:fc:
         4a:1f:17:2f:e7:a7:80:23:be:bc:a0:63:0e:0c:b9:65:fb:4a:
         9d:12:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:55 2025 by rpki-client