Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
File:                     7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa (raw, json)
Hash identifier:          oLw2BI0KUdn1o0cIMjGo4o3QPy8N492wKL/fosrZqkE=
Subject key identifier:   21:6D:08:46:47:02:C8:AD:90:D0:9C:45:46:B8:0B:60:5B:4B:06:07
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F432858495C2438DFCA37DA97E8480440
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     23274
IP address blocks:        64.6.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:38:df:ca:37:da:97:e8:48:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=ef6369a8-2cf8-4f57-9468-bf4d08a9ffe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:f9:c8:ab:4c:db:82:09:b5:03:f0:0b:23:
                    96:a4:9c:75:8d:2b:59:7f:f0:cf:2f:fb:9d:de:25:
                    ca:fa:92:0e:01:c7:e7:ef:fd:11:d6:cf:c0:30:a8:
                    a4:97:4b:ca:96:b3:5d:35:71:b1:c3:b8:4c:0f:e3:
                    88:a0:eb:dc:25:4d:56:5a:98:1c:79:b3:c9:97:6d:
                    d0:fc:ab:0b:a6:9e:63:9e:8f:1b:06:30:e6:8a:f4:
                    a4:16:71:06:e5:12:9e:07:58:1e:c6:2c:0f:bb:74:
                    b5:72:db:7f:18:8c:99:a9:25:d5:01:4b:28:47:c3:
                    71:83:a1:18:f3:d4:a7:0f:b1:c8:d7:76:b3:6e:01:
                    22:69:73:40:0c:a0:e2:30:51:d9:4f:96:38:85:5f:
                    d2:9e:58:b7:81:a1:e5:a8:f3:fa:76:fe:7a:b9:2f:
                    84:b3:e4:d4:27:f3:54:35:d8:1b:66:41:2d:47:06:
                    9e:80:d4:52:82:d4:c1:db:38:49:86:b6:b1:67:1a:
                    5d:e5:5b:d6:81:85:36:bf:2e:35:8d:fa:e5:09:66:
                    3f:10:c8:d4:1a:be:b9:34:6a:7c:e4:fb:08:d5:1a:
                    ee:fa:da:23:d3:72:21:8f:19:f0:64:c6:09:41:9d:
                    55:51:d8:b9:8f:37:7d:30:49:2f:69:91:63:a2:a0:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:08:46:47:02:C8:AD:90:D0:9C:45:46:B8:0B:60:5B:4B:06:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:ec:ee:16:f2:ef:c2:61:25:64:34:78:85:ff:5c:00:e3:
         90:d5:dc:b8:81:19:ce:21:68:01:59:c8:be:a1:c9:7a:b0:11:
         73:31:d5:b3:97:13:79:bf:a6:0e:18:db:d8:fb:64:0f:6a:bd:
         d2:25:59:28:91:b9:8b:2c:20:57:03:d1:53:ac:84:00:fc:88:
         54:4d:b8:19:11:95:46:db:41:c2:0a:22:62:a5:d5:66:73:3f:
         16:b4:fb:79:78:ca:a5:9f:b4:2c:f6:a4:3d:21:01:cb:56:7a:
         bf:9a:15:0e:9c:3f:7a:3c:db:5e:3e:eb:b7:b9:a3:ce:7a:dd:
         92:1a:35:8d:9b:28:79:b5:20:78:1a:58:b5:d2:51:b8:9d:18:
         12:89:e1:0b:c8:7b:b3:08:56:9f:c3:0d:77:66:47:43:16:13:
         b9:21:12:00:d3:f8:8a:06:07:a0:55:dc:06:e6:c5:3a:8a:5b:
         0d:53:0e:13:1f:23:15:e0:2a:a0:6a:56:20:4b:17:d2:f5:c5:
         9b:e5:39:db:a5:43:c0:4d:13:a8:fb:94:1c:f7:ec:99:39:3e:
         9d:29:2c:55:70:4f:3b:b4:12:49:1c:ad:69:39:aa:54:4d:ee:
         4e:19:f4:38:8b:9b:79:50:e9:47:d7:9e:6c:78:de:68:24:7e:
         c0:f2:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----