Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa
File:                     4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa (raw, json)
Hash identifier:          gcXC82mHb3ULpF+octa/9/4sObSpYfpXAwRjxKx7e/o=
Subject key identifier:   CB:43:87:CB:0C:A1:89:DF:EF:5B:1E:51:D4:51:24:79:F9:93:CD:A1
Certificate issuer:       /CN=15eefb33-983f-41ca-b75b-50ef1b0aa5fc
Certificate serial:       010D0C9F43285848EF613F9C7D5D28305B7A37B0
Authority key identifier: 83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     397856
IP address blocks:        207.188.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3f:9c:7d:5d:28:30:5b:7a:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15eefb33-983f-41ca-b75b-50ef1b0aa5fc
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=40d2965c-1b97-4123-a823-96e9704ea9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:20:25:0a:69:54:4a:4e:9d:2a:bd:ca:a5:
                    b5:17:02:ae:df:2b:5a:c1:fc:e3:f8:6c:44:3a:58:
                    0e:8c:85:17:6b:4d:60:8f:34:71:15:71:04:98:fc:
                    90:82:d9:8c:75:5c:ce:79:29:bd:c7:52:11:ce:1b:
                    07:4a:9e:dc:23:a6:32:ff:dd:f7:b6:a8:e8:ad:99:
                    89:fd:16:73:b4:69:54:c1:7a:5f:71:d4:33:12:58:
                    9e:a1:fc:5b:6e:54:53:2f:55:d5:45:1c:e2:81:f3:
                    dd:6a:e8:56:55:19:4d:b4:ec:e1:18:65:13:a1:eb:
                    52:ce:14:de:f7:30:da:bb:62:74:ed:06:70:5d:0d:
                    01:8b:6b:59:5f:59:d0:5f:0f:4e:bb:7b:40:83:c7:
                    d7:5c:a9:5c:5a:8b:94:17:09:ee:81:cb:8f:95:70:
                    8d:05:e4:fd:a8:68:32:dc:b3:ed:0f:12:87:89:2d:
                    4a:e8:9e:5b:1d:00:ae:82:b0:12:a2:1e:01:bf:85:
                    c9:80:1c:10:1c:31:89:0c:ca:b3:b5:3e:23:76:1a:
                    47:d1:62:9c:1b:4c:c3:9a:13:70:6d:40:11:45:43:
                    43:bb:1d:64:04:a8:7e:64:07:c0:f0:e9:f0:6d:7b:
                    47:94:92:e7:8b:4d:84:4b:f8:2d:d8:2c:86:f7:28:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:43:87:CB:0C:A1:89:DF:EF:5B:1E:51:D4:51:24:79:F9:93:CD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.crl

            X509v3 Authority Key Identifier:
                keyid:83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.188.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:07:fa:94:1c:31:f4:9b:3e:9a:e3:b9:36:2e:3c:bc:06:e7:
         f8:bb:74:46:74:26:cb:06:8a:b9:37:48:03:83:e8:85:cd:30:
         6a:8a:61:dc:25:4b:ca:85:c8:49:80:79:95:a2:b6:3c:3f:c8:
         4a:71:b4:47:71:81:c1:b8:65:c0:70:fc:20:b5:f2:4b:e9:6f:
         55:e2:64:fd:23:e8:5d:41:69:b7:63:a4:81:76:79:cb:ca:81:
         a8:39:85:7d:01:ed:70:2a:c5:f0:ab:80:a8:73:08:e7:98:6b:
         3f:eb:d2:94:71:98:79:88:d6:92:d0:8c:6a:c7:c8:55:09:33:
         95:af:b5:e1:3a:22:06:97:09:78:c2:f1:c8:e1:da:d8:b9:2c:
         5c:3a:b1:ac:60:92:49:e7:d5:1a:35:3e:a7:7a:35:00:90:57:
         39:54:ff:2c:23:e0:18:a7:3e:da:5a:e0:96:90:02:de:71:6c:
         dc:53:9e:76:7d:5e:df:12:6b:72:58:5a:60:ad:d1:9b:0d:c6:
         c1:15:40:37:8d:8d:ae:41:8d:a9:17:f5:f6:a7:91:23:e1:36:
         44:a0:39:b5:a9:e9:f5:ba:22:a8:fb:6a:99:be:72:8c:78:21:
         08:9a:fa:c8:18:93:4e:f2:f8:32:0f:aa:f8:a3:40:dc:94:01:
         47:8e:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:05:22 2025 by rpki-client