Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa
File:                     5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa (raw, json)
Hash identifier:          74hS+xKhyDfjVEuP8Ifv79EqUz36oqj+9p3v6efbNCw=
Subject key identifier:   5B:43:AB:CE:E9:C9:C7:BC:CB:99:D5:40:16:95:CF:33:4A:69:48:3D
Certificate issuer:       /CN=7767794e-08b2-4526-9f12-2edd85918e87
Certificate serial:       010D0C9F4328584925B3A66D4B7DBF0771F30580
Authority key identifier: 36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     376
IP address blocks:        206.167.10.0/23 maxlen: 23
                          206.167.12.0/22 maxlen: 22
                          206.167.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:a6:6d:4b:7d:bf:07:71:f3:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767794e-08b2-4526-9f12-2edd85918e87
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=5acfaed3-40ff-4beb-a25c-08ed4a79a376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:d5:23:f8:10:17:f3:4e:1f:d5:84:19:ec:
                    69:f0:aa:c4:71:d5:49:63:75:ca:34:52:e7:10:0b:
                    07:09:c1:a5:74:a9:af:8b:fe:99:45:69:80:a3:20:
                    d7:cd:a5:6f:26:e8:20:9e:4f:38:da:9a:cf:7b:cd:
                    06:20:35:cc:24:e7:18:d4:96:b7:63:cd:c9:bf:31:
                    b6:1d:aa:58:21:a5:4a:69:aa:5e:0e:51:ad:93:10:
                    0f:4e:02:2d:d6:e1:de:a5:16:bb:b0:57:94:79:ef:
                    8f:6e:db:24:e0:14:be:29:2f:ed:f1:6a:1f:ef:c4:
                    25:7c:49:f0:68:15:a6:a7:de:58:75:6f:5a:19:00:
                    64:72:ca:f1:b9:fc:60:7a:d9:26:10:69:51:2c:f6:
                    d3:d7:dd:fa:e7:9d:0d:56:24:97:57:9a:5c:a7:73:
                    4d:0c:f8:4e:ab:08:c3:42:bc:65:70:7a:90:eb:32:
                    62:40:8a:2f:f3:e5:5e:64:33:96:31:9b:e8:02:0c:
                    cf:ac:ca:0e:b4:e3:91:1f:57:27:68:eb:6f:c3:0c:
                    b6:c6:1a:5d:ad:b2:37:54:eb:15:e5:2c:44:00:9c:
                    71:b5:76:c0:60:51:18:18:75:b9:eb:c8:f1:60:f6:
                    09:94:9b:77:bf:e2:90:df:9a:3f:77:fc:24:c2:30:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:AB:CE:E9:C9:C7:BC:CB:99:D5:40:16:95:CF:33:4A:69:48:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.crl

            X509v3 Authority Key Identifier:
                keyid:36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.10.0-206.167.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:55:a6:d7:35:76:c3:a0:a5:80:cf:5d:d2:31:20:e2:b6:
         5f:0e:ef:0a:d0:82:75:8f:a8:c6:03:da:74:49:fc:bc:f6:06:
         67:ae:91:5a:c3:ba:4f:1c:3e:ff:da:db:75:b5:2d:cc:54:b9:
         d4:b5:6d:cd:5c:99:19:6a:9f:12:95:82:b7:eb:2f:d3:d9:bc:
         7e:25:2f:1e:6c:a6:73:65:2b:cc:36:ca:f8:24:29:f3:54:1b:
         ea:16:a0:c7:39:4f:bd:3a:da:0e:3c:05:dd:e5:46:be:d4:e9:
         a3:d4:95:f3:59:7e:81:fe:4a:ad:b4:a9:d9:ee:89:07:97:35:
         52:03:01:23:fa:c4:cb:b5:c9:54:53:7f:a8:ba:9c:69:90:8c:
         56:11:9f:ac:e0:2a:f9:08:2e:5f:73:78:14:da:e2:c5:a7:31:
         31:06:d9:73:b6:07:8d:9d:5f:a7:cc:1e:e5:a7:30:d6:df:39:
         37:e2:67:e0:c5:d4:9c:5d:53:b1:16:96:6f:8b:e7:39:b1:b9:
         53:9c:8f:44:37:ea:c9:1f:94:20:d8:96:e6:4a:df:2d:71:2d:
         b1:59:6c:f5:e2:df:70:b6:64:e9:a4:33:50:f3:50:db:ce:06:
         b1:05:33:34:b4:69:1c:c7:3b:63:04:71:94:af:ca:02:0a:c5:
         77:2a:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:27 2025 by rpki-client