Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa
File:                     2871d28b-2672-36d2-8d46-0df272837595.roa (raw, json)
Hash identifier:          ZTyXtAZ6QvIxSJYwnABydlYILaHxdhnkoppP/PmoQMs=
Subject key identifier:   70:6A:FB:19:EB:1A:B9:75:C8:EB:73:31:A5:DF:C7:9B:00:29:C2:E4
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F432858494B641CF9DB250BE9AEC38E00
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     19782
IP address blocks:        128.10.0.0/16 maxlen: 24
                          128.46.0.0/16 maxlen: 24
                          128.210.0.0/16 maxlen: 24
                          128.211.0.0/16 maxlen: 24
                          192.5.40.0/24 maxlen: 24
                          192.5.48.0/24 maxlen: 24
                          192.5.91.0/24 maxlen: 24
                          192.5.101.0/24 maxlen: 24
                          192.5.102.0/24 maxlen: 24
                          192.12.63.0/24 maxlen: 24
                          192.31.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1c:f9:db:25:0b:e9:ae:c3:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=de157d41-c19c-4259-a0f2-abe9aede5228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:76:87:e1:c4:04:9b:a7:6c:29:bb:fc:53:
                    10:41:e3:16:24:41:35:7a:4f:76:9e:22:63:c5:0e:
                    06:88:72:eb:d0:b2:b9:6a:dd:c9:61:90:c0:51:1a:
                    8d:46:84:52:79:3e:54:98:d7:be:90:61:71:e9:3c:
                    c4:78:3a:1e:f7:22:41:c3:ba:9f:de:d5:4f:c0:7a:
                    3d:25:15:76:13:7c:60:f6:f8:34:72:73:22:c5:85:
                    ca:02:97:b8:51:d0:44:90:4f:83:8c:4f:b0:fe:18:
                    f5:6a:68:2c:c9:fc:3b:3b:c6:28:a2:21:d6:69:de:
                    0b:94:84:75:64:fa:52:dc:5e:dc:81:3c:35:f0:2d:
                    25:49:bf:1a:d7:72:bb:6f:c3:e1:12:8a:12:18:55:
                    e2:69:86:e0:cd:2d:10:ce:e9:b3:30:0d:4c:68:75:
                    6e:ba:46:51:01:91:49:da:ff:5d:6f:13:e7:cb:bb:
                    e5:81:e9:53:67:aa:c4:5f:b6:02:21:a0:e3:9b:6b:
                    ff:ab:11:51:d6:06:2c:c3:76:a5:8b:74:45:69:30:
                    e2:14:7b:00:8d:ea:5f:46:17:d6:08:3a:77:c5:14:
                    51:d4:da:6d:cf:27:b1:1d:1c:4e:1e:9e:ae:25:1a:
                    a0:8b:dd:80:ac:5c:b0:fd:40:6b:52:4c:c8:11:15:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:FB:19:EB:1A:B9:75:C8:EB:73:31:A5:DF:C7:9B:00:29:C2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.10.0.0/16
                  128.46.0.0/16
                  128.210.0.0/15
                  192.5.40.0/24
                  192.5.48.0/24
                  192.5.91.0/24
                  192.5.101.0-192.5.102.255
                  192.12.63.0/24
                  192.31.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:dc:4b:ff:cd:68:56:1e:7e:e7:ad:b6:c2:af:c0:73:d7:a4:
         dc:15:c1:35:1f:9e:46:0e:ee:b6:4f:5c:83:f2:3f:66:42:66:
         aa:76:60:76:31:b1:a0:83:39:41:d6:d6:5a:e9:4f:1c:c4:2e:
         e2:04:23:5e:5e:a6:21:41:4b:2b:ad:77:a4:63:d7:f3:f5:15:
         fd:85:ad:b0:c1:a3:58:48:12:e2:e0:5a:ff:5f:11:24:41:55:
         c0:ec:69:17:11:a0:1c:3e:05:26:e1:88:a1:f5:20:21:28:fe:
         56:a7:a9:ea:f0:00:6b:81:4c:38:5f:61:88:80:52:d6:95:ee:
         c6:3f:9a:fc:10:58:1f:a5:39:07:e8:c1:67:95:4c:5e:9e:b7:
         73:1e:5a:d8:03:b9:21:e4:9a:54:4f:e8:55:b9:0c:b0:0e:9d:
         c2:41:36:3b:8a:a1:63:c7:14:b7:d0:48:9a:c3:be:db:51:3e:
         ce:56:69:99:f4:61:4a:a0:6a:85:e8:49:7b:7b:eb:ef:fa:c7:
         02:01:4d:64:aa:91:81:b0:92:4d:94:e3:3d:26:f0:b0:6a:0e:
         9c:a6:8a:21:ed:98:f2:c5:76:82:d0:e6:c1:00:17:5c:9f:e5:
         60:1d:25:b3:2b:6b:89:21:22:ff:7b:f0:72:b3:f8:da:0f:27:
         18:64:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:35:00 2025 by rpki-client