Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa
File:                     2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa (raw, json)
Hash identifier:          FXv0UPV43VOPrYuXnNT+tQ26EkRP55Ix9/Jwsrvm1FE=
Subject key identifier:   2D:62:43:D1:5A:E9:B8:BE:55:9B:85:03:89:BA:00:66:0C:C8:5F:43
Certificate issuer:       /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
Certificate serial:       010D0C9F4328584F62931F9716376B8529CCEC80
Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     32354
IP address blocks:        162.244.56.0/21 maxlen: 24
                          172.81.188.0/22 maxlen: 24
                          173.239.64.0/20 maxlen: 24
                          204.11.104.0/22 maxlen: 24
                          208.64.184.0/22 maxlen: 24
                          208.71.156.0/22 maxlen: 24
                          208.76.28.0/22 maxlen: 24
                          208.80.116.0/22 maxlen: 24
                          208.87.216.0/21 maxlen: 24
                          2607:f640::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1f:97:16:37:6b:85:29:cc:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=b51bb330-cd3a-4777-90c5-b9af27afac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:e1:46:d7:7b:d5:8f:da:2b:10:fe:4d:a7:
                    46:62:d8:c8:9f:97:fd:db:79:db:77:ab:9e:b7:44:
                    2b:46:31:fb:ce:d4:32:f5:1b:35:33:89:22:19:45:
                    b9:b3:53:54:be:fd:0c:ea:a4:15:b8:bf:ba:4e:92:
                    ac:71:2c:39:4f:23:64:67:de:d3:ca:16:e9:02:48:
                    5f:2c:52:8e:5b:eb:cd:ec:95:2e:c1:55:40:6c:6f:
                    7d:25:f7:8d:98:ac:3b:f2:5e:d6:e4:8a:77:00:7e:
                    29:27:bd:3c:7e:c4:d9:76:f1:4e:a0:9e:02:e8:bc:
                    9d:ce:34:4b:11:25:5a:28:93:6a:fb:0f:e2:35:71:
                    cd:87:d7:3f:58:9d:59:98:0d:b1:85:0f:f9:fb:7a:
                    0e:d9:7b:1d:c6:93:13:df:df:fb:d9:4d:89:23:cf:
                    d7:63:42:65:bb:92:11:08:14:57:6f:85:18:d9:6c:
                    1f:69:8d:f4:ed:8b:51:7c:e0:3f:93:9b:a4:3a:43:
                    07:b4:7c:7a:60:01:0b:6b:e5:df:74:30:84:56:81:
                    f3:2b:b1:84:60:50:a8:08:85:d8:ea:15:5c:88:80:
                    7e:0e:c7:1d:16:f2:ac:81:0b:2b:b6:8b:02:a0:87:
                    55:b7:15:46:fc:b8:50:58:56:41:21:58:1a:e7:6c:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:43:D1:5A:E9:B8:BE:55:9B:85:03:89:BA:00:66:0C:C8:5F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl

            X509v3 Authority Key Identifier:
                keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.56.0/21
                  172.81.188.0/22
                  173.239.64.0/20
                  204.11.104.0/22
                  208.64.184.0/22
                  208.71.156.0/22
                  208.76.28.0/22
                  208.80.116.0/22
                  208.87.216.0/21
                IPv6:
                  2607:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cc:3f:a4:47:95:6e:6a:b8:4f:43:c4:df:f0:6a:aa:2e:58:
         2d:bd:4b:53:80:9e:b5:65:11:0a:ca:0e:5f:a2:0a:dc:70:86:
         c1:0b:e5:8b:00:c1:dc:d6:3d:2c:8b:3c:77:62:71:4f:e4:fd:
         51:65:40:74:c0:95:e2:b8:91:2e:64:55:e9:02:a5:89:3b:29:
         a2:cb:45:0c:95:52:e8:21:86:3c:d8:20:12:a0:ef:21:26:9f:
         6a:7e:57:48:94:32:81:62:08:bc:84:43:50:bc:86:b2:72:a4:
         a7:2b:fe:82:5d:9c:2c:79:07:cd:d5:1f:db:1f:82:ab:b8:d3:
         69:3a:e1:61:d9:29:a5:9a:54:36:8e:ab:91:b0:39:d6:ce:d4:
         7c:14:23:4c:36:51:d5:f2:1e:93:f2:cc:ed:97:cf:76:f7:df:
         5c:e9:f5:4d:d5:38:d8:f9:ea:be:25:2d:85:fe:10:fa:13:b2:
         f1:4a:b8:2d:58:14:04:21:de:f5:05:64:bd:c7:7a:2e:13:c5:
         a5:fc:1b:d7:da:5f:1d:f2:9d:04:62:49:c8:24:c8:0d:ca:7e:
         99:4f:a0:e1:cd:1c:3c:48:79:39:75:1f:53:6e:7e:63:bd:3d:
         54:68:a7:bf:ee:28:96:aa:e4:e2:44:d2:07:7a:c8:64:56:c3:
         d1:82:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----