Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc1a47cc-36e7-325a-a57f-d18c90ee8650.roa
File:                     dc1a47cc-36e7-325a-a57f-d18c90ee8650.roa (raw, json)
Hash identifier:          F19G4o5ZrdCvgPpj42rWZl0jTI7s0WWG3/JlYaklEuM=
Subject key identifier:   58:16:51:17:02:9C:CC:B0:4C:F2:36:72:A4:69:0C:43:B9:15:C6:FF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42BB33FB17FD9B174BC80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc1a47cc-36e7-325a-a57f-d18c90ee8650.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.215.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2b:b3:3f:b1:7f:d9:b1:74:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=43dcc9f8-c03e-4897-9601-079ec5c76e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:8c:96:aa:16:ac:13:84:4e:e7:b6:52:3b:
                    92:50:a1:98:44:6d:9f:5f:f4:d3:5d:1d:06:c2:84:
                    84:06:e7:94:c9:87:16:a7:58:87:0c:37:12:c3:1b:
                    40:ac:67:26:45:c4:b7:58:a0:3b:f0:79:85:af:65:
                    a4:58:1e:7c:70:25:dd:67:0b:1c:f1:31:73:2f:87:
                    fb:bc:23:21:98:74:26:e0:a0:65:7c:ee:75:88:48:
                    ce:ff:0c:99:05:12:fa:55:ef:e4:eb:c7:7e:f1:bd:
                    a3:0a:eb:67:2f:99:fa:c6:65:12:59:42:3b:59:a2:
                    4c:15:4b:04:2e:d5:3d:58:34:e0:14:5e:69:c8:b4:
                    21:a5:c6:c6:8e:e2:1d:44:b1:fa:90:79:7d:61:31:
                    fb:83:c4:d6:ca:7c:55:7d:61:9d:6a:b2:79:72:86:
                    43:83:6a:2d:2a:0e:60:c8:34:62:c9:93:89:a1:c7:
                    e9:ea:45:fa:de:ac:65:be:38:56:9d:9c:a8:99:46:
                    80:cb:5c:d5:ae:37:e6:ae:b6:b0:86:92:54:19:dc:
                    9c:7b:64:b3:c7:2e:0c:f0:01:e7:22:99:d5:a6:1b:
                    8e:14:b3:d1:59:49:7d:06:5d:f3:d8:87:e8:5e:71:
                    a8:a9:4e:6c:da:60:6d:b5:bf:ce:c1:d4:be:b0:a4:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:51:17:02:9C:CC:B0:4C:F2:36:72:A4:69:0C:43:B9:15:C6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc1a47cc-36e7-325a-a57f-d18c90ee8650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.215.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:cd:5b:12:c7:53:1d:09:17:5c:4f:f2:0b:a7:b1:9b:50:
         a1:36:46:56:7c:56:9a:81:7a:41:9f:61:b9:63:92:4b:84:6e:
         1d:86:f3:9b:e6:b5:ab:b1:a2:2f:8e:b1:9a:39:6b:5b:e3:2d:
         af:33:54:09:9e:8f:97:87:4b:0c:0d:9e:1c:f7:da:95:3f:c2:
         95:63:16:0b:cd:c7:5e:f5:fd:d8:a4:11:e8:c9:e4:86:10:5e:
         70:40:66:40:c5:04:36:c6:1a:88:d5:32:4f:47:f9:bb:e7:13:
         1a:0a:62:b0:9c:eb:98:bc:9e:03:f9:da:f6:ae:11:28:e2:6b:
         72:1c:f1:fe:8f:e5:af:1d:2c:19:d5:62:cc:67:dd:77:47:6d:
         17:13:c9:fe:3e:80:c0:91:17:71:a1:92:66:50:5a:dc:e6:80:
         e0:af:1e:80:b2:90:ae:1c:5d:64:fb:9b:fc:85:f4:01:0b:29:
         a3:0d:00:17:a8:6f:66:a2:37:f0:38:19:dc:1a:2e:3c:a5:4a:
         d1:e7:3e:25:b6:2e:40:a9:2b:a9:6a:1b:bc:d5:3c:46:83:de:
         cf:f0:2b:b1:b5:bf:74:05:8b:23:7e:95:8b:a9:6c:d0:22:2c:
         27:2f:50:dc:7b:cd:b5:0b:eb:f1:e3:fb:9e:32:cc:88:94:9a:
         e1:9f:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:03 2025 by rpki-client