Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cf2c8c4f-e40f-3b96-b346-358f6a9a7141.roa
File:                     cf2c8c4f-e40f-3b96-b346-358f6a9a7141.roa (raw, json)
Hash identifier:          6CkmO+ICBHt/+F8WmA8YZuV9T2SCRuok1ZifpqQgvy4=
Subject key identifier:   39:88:69:77:D3:58:FC:A2:55:50:A2:F3:C5:6D:08:BC:FE:D6:2C:A8
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285848DA70FE3E8FCB401A027793C0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cf2c8c4f-e40f-3b96-b346-358f6a9a7141.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        76.10.128.0/18 maxlen: 18
                          76.10.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fe:3e:8f:cb:40:1a:02:77:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=fb04561d-1cfe-423a-9e72-7c010b2ffac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:ed:49:49:5c:27:85:2e:97:44:76:5e:14:
                    06:ee:c2:06:7b:83:e4:ea:5e:7d:56:e5:e5:e2:e0:
                    30:15:37:c4:5b:8c:f5:49:f5:75:0b:d8:8e:8e:8f:
                    9d:17:93:eb:12:8b:2d:35:e3:d7:de:71:ca:16:31:
                    de:ac:0e:0d:93:27:c5:52:a0:28:3c:3a:8b:29:0e:
                    0e:4e:6c:e0:37:80:ae:64:d5:21:d7:b6:9d:76:43:
                    5b:48:76:65:21:31:99:61:ab:7a:b2:0a:9f:03:57:
                    1a:31:e4:1d:b3:c0:6e:ac:50:2a:6a:4c:a9:54:d9:
                    4f:ce:ed:c8:49:de:7d:9d:e1:5b:8d:83:6f:30:43:
                    85:ab:70:32:a3:44:28:1e:f2:7e:3a:fe:a4:62:f3:
                    d8:65:16:bf:f1:27:59:ed:5e:0c:42:eb:d4:90:38:
                    b3:93:ad:29:53:f9:d9:18:0c:27:3a:82:6d:83:36:
                    eb:27:49:c6:26:95:5f:80:99:67:b1:3b:40:6a:39:
                    e7:e5:e8:cd:28:b8:c8:8b:74:29:c9:ba:df:99:ee:
                    71:c0:85:fb:40:8a:ea:57:ce:2d:e9:b6:1d:f3:28:
                    ea:46:0d:9a:e8:24:d0:5d:f0:d1:e6:49:82:47:a9:
                    86:ec:9c:64:8c:f9:e5:d1:e8:62:ed:8b:f3:87:a0:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:88:69:77:D3:58:FC:A2:55:50:A2:F3:C5:6D:08:BC:FE:D6:2C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cf2c8c4f-e40f-3b96-b346-358f6a9a7141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:73:64:8a:bc:85:bc:b4:ba:6b:32:2e:1c:54:5f:07:56:52:
         a5:6c:ed:7d:cb:2e:47:97:4f:d5:fd:f5:c8:a0:55:e6:38:ad:
         31:de:a8:12:af:67:77:4c:88:ca:ec:ef:c4:23:55:83:c4:b9:
         16:70:eb:65:c3:05:44:c0:24:6c:fc:59:be:3b:a2:7b:aa:9b:
         14:34:b6:19:0b:41:66:ee:05:0f:78:8d:52:1d:9d:2a:55:76:
         17:b1:b3:7d:f8:bc:fe:ec:3d:7e:c0:c5:2b:78:54:41:a9:0b:
         43:b1:e3:af:44:91:6f:17:b2:09:01:da:2f:77:a3:6a:ea:b4:
         48:50:03:41:c9:ec:49:89:4b:21:55:21:4b:d4:13:b9:bb:5d:
         d0:4a:b6:9b:da:b8:8e:4f:5c:59:f4:a1:f0:fc:fa:71:10:66:
         40:ea:68:e8:00:9f:9e:34:59:7e:d1:13:88:c3:d4:5b:41:1e:
         5e:dc:c0:ad:0b:d9:c0:7a:fb:4e:7b:5c:e6:e7:f1:b5:93:2f:
         c2:be:6f:61:e5:ce:ba:d0:42:dc:6f:9f:65:b2:dd:e5:3d:3c:
         8c:f4:a7:83:cd:62:09:3d:38:92:d0:a9:42:05:0b:07:55:55:
         ad:cc:8b:80:fb:75:49:8e:f7:e8:42:bc:2e:6f:1b:67:7f:5a:
         4d:81:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:36 2025 by rpki-client