Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
File:                     8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa (raw, json)
Hash identifier:          ASObn2ypTDBYcr8W/JP5PWgJ/k5fpwhGS3/F0KmbpCU=
Subject key identifier:   62:12:82:CB:44:56:BB:6F:B3:32:57:E8:71:A5:BA:73:3F:2E:15:11
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F43285848D978F0F59D1F550B32CE2200
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
Signing time:             Tue 11 Feb 2025 17:40:59 +0000
ROA not before:           Tue 11 Feb 2025 17:40:59 +0000
ROA not after:            Mon 12 May 2025 16:40:59 +0000
asID:                     5693
IP address blocks:        165.140.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:78:f0:f5:9d:1f:55:0b:32:ce:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Feb 11 17:40:59 2025 GMT
            Not After : May 12 16:40:59 2025 GMT
        Subject: CN=d8b37b0c-ac03-4e8a-92c7-955378216624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:4a:f0:9b:06:4d:5f:da:69:f3:16:f2:d6:
                    02:6f:42:7b:85:48:b7:87:9a:ab:19:bf:c2:1b:7a:
                    7f:f1:0f:53:be:80:23:02:86:4f:d5:11:38:98:9b:
                    83:85:3f:2d:2c:1f:52:bf:39:20:af:f7:17:66:37:
                    49:c6:97:d6:35:83:04:3e:ea:58:9a:62:26:08:83:
                    48:38:f7:46:74:50:10:c1:29:58:31:0b:84:33:1c:
                    5e:20:8e:f5:e1:f2:8b:b2:18:d4:44:0d:c0:f8:3b:
                    73:61:2c:9c:a7:fd:8f:03:3a:b3:ae:2e:ce:40:7c:
                    49:5c:50:c3:0d:ab:d0:92:e1:8b:92:a5:a4:ab:3d:
                    64:30:4b:1e:10:3c:4f:9a:32:26:e2:30:94:ef:18:
                    88:4e:bc:3a:9c:60:01:f6:5b:c5:dd:cc:bf:06:b5:
                    41:a0:21:56:cb:50:b5:e1:18:80:30:2e:e0:71:ef:
                    92:6c:c0:aa:a7:6f:0d:fe:af:97:40:b4:93:5c:72:
                    97:87:60:43:60:00:32:51:bd:b3:5f:ce:8e:6f:1a:
                    94:7c:56:dc:e5:39:0c:96:9d:80:2b:a1:54:79:f0:
                    1b:7f:e4:4e:14:51:23:7a:31:ec:6c:d8:a9:36:cd:
                    7d:44:66:d2:7f:99:d8:5e:b2:3e:78:83:72:c7:33:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:82:CB:44:56:BB:6F:B3:32:57:E8:71:A5:BA:73:3F:2E:15:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:c3:ba:3d:a6:ce:ff:c0:b4:85:f0:08:a7:aa:84:62:86:
         a0:83:94:e8:b2:4d:4e:72:68:57:31:04:41:a3:8b:46:67:f6:
         b7:df:ac:bf:3a:f5:2e:c1:cb:20:ed:20:7b:ec:32:d8:78:5a:
         5e:65:3d:45:16:47:d0:16:ae:73:1f:a3:27:fe:59:e6:a9:94:
         74:b4:78:20:fe:e4:15:f4:cf:01:a5:82:34:aa:31:d2:be:03:
         63:90:6f:3d:a4:93:70:d8:eb:bc:0c:e0:46:91:2a:63:44:4d:
         10:e1:eb:a6:69:b5:81:b1:15:ee:fd:c3:db:c5:a0:03:bb:e5:
         bc:d4:22:37:06:97:77:8d:0d:bb:7f:b2:ec:04:2b:0d:3a:03:
         e8:8f:6c:93:b1:5d:8e:a4:79:ab:92:e1:f0:bf:27:54:07:ac:
         33:56:98:41:b9:66:88:d6:89:22:9a:c2:fd:99:5a:2b:fb:70:
         cd:47:8b:46:ba:a8:a6:2c:82:4e:7b:a4:00:79:af:44:a9:a0:
         a0:f5:65:0c:34:5a:42:71:23:5e:f1:8d:fb:56:63:2a:35:85:
         4e:22:67:6a:8c:c4:e4:b5:d9:bf:63:97:d6:ce:51:53:20:b3:
         83:96:6e:6a:2a:5b:be:fd:e1:c4:1f:5a:e2:62:9b:55:e3:f4:
         fe:8b:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:25 2025 by rpki-client