Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa
File:                     4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa (raw, json)
Hash identifier:          2ar02Tcair31za5DD1coA2Wccp+7W5diincodeTJs1E=
Subject key identifier:   A1:9E:AC:DE:89:B6:0B:48:1D:53:90:8B:47:85:D4:8D:30:E9:DE:03
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858490CB16DDD9FD5AA5A031AEA80
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     212374
IP address blocks:        199.115.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6d:dd:9f:d5:aa:5a:03:1a:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=1cdc64ea-0e7b-4f31-9476-28e7f09fb4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:cd:26:e9:27:52:71:32:3a:0a:f1:85:03:
                    e1:4c:20:86:c7:37:3c:1d:f9:e2:2c:8a:7f:4d:b8:
                    30:dc:cf:79:6d:71:26:b5:9b:89:3b:6b:73:ce:60:
                    a4:47:97:64:1b:e0:b4:ce:b2:ff:8b:27:cd:24:b1:
                    fa:e2:38:47:32:8e:b1:f1:8c:74:f0:ff:7e:eb:57:
                    e2:98:6e:be:77:bd:83:b0:b4:29:e7:cc:d2:27:c6:
                    dd:f7:cd:d3:4a:4d:57:ef:20:5b:8f:ff:78:00:68:
                    c2:a3:ce:ed:a5:5a:46:61:fd:f7:6d:57:fc:92:83:
                    1b:6f:14:52:52:cf:18:02:40:15:01:cf:1f:dc:3d:
                    03:6e:b5:de:af:55:5d:80:53:85:29:16:25:0d:05:
                    72:b8:c3:29:94:bc:e6:1e:85:bc:d5:a3:db:7b:14:
                    8a:3a:13:89:92:3b:f6:51:f0:39:45:b6:78:49:47:
                    4b:04:99:03:51:df:68:4e:80:07:7c:00:bd:f3:10:
                    09:d9:58:cb:e5:88:d8:58:8e:61:46:7b:41:19:84:
                    69:c5:ab:39:a2:06:6b:c0:7a:6e:a7:9a:cc:c7:ac:
                    b0:38:39:89:3a:f0:c2:a5:ea:d9:e3:db:27:95:bc:
                    25:24:be:af:aa:2c:f6:de:3c:27:82:c0:d0:b3:41:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9E:AC:DE:89:B6:0B:48:1D:53:90:8B:47:85:D4:8D:30:E9:DE:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:c6:d4:db:55:d6:db:ce:24:12:e6:11:9a:ee:a7:8c:7f:
         35:76:13:f5:6d:91:3a:98:54:31:66:c9:26:f4:53:0c:0f:5c:
         a2:90:78:74:52:99:67:9e:e1:d0:97:58:a5:54:b7:e0:44:53:
         ef:2b:fb:be:3f:65:90:b4:52:90:df:cc:64:78:27:98:b3:79:
         5f:ab:ba:19:3a:a6:b8:f8:32:99:b6:2b:77:fa:16:5a:42:13:
         41:fd:e7:57:f4:f6:a7:08:ee:40:00:a4:fc:fb:ca:48:5e:7b:
         27:d5:a6:5b:f6:a9:d0:de:87:56:0d:7c:e5:56:ab:a0:bd:c1:
         2a:34:30:2c:bc:2e:f8:1a:15:e1:b4:a0:2b:aa:ad:dd:95:de:
         60:28:c7:6c:20:86:da:fb:b6:0f:51:b8:15:fb:59:8c:72:ca:
         d4:75:f7:21:ce:d9:85:dd:2c:95:c1:5d:60:cc:8f:60:b1:9e:
         c6:75:f5:a1:7a:62:03:d5:76:b9:70:d4:d5:fb:ce:93:c5:5b:
         ce:c8:c6:0a:92:e3:36:b5:97:be:34:b2:ac:f0:2f:f0:8f:d5:
         cd:41:ee:e9:05:55:c1:ba:19:40:7c:75:0b:ba:32:4c:ab:bf:
         7f:d4:48:d2:17:59:a1:94:52:a5:1c:f9:af:87:4f:97:3f:fb:
         28:bb:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:44 2025 by rpki-client