Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa
File:                     ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa (raw, json)
Hash identifier:          awwfGGsCguNIh2sUTlFNdIdva8Vjn5n5Y8D8nKuHiOE=
Subject key identifier:   9E:13:89:49:59:16:D1:C8:58:5E:6C:F4:EF:18:65:BB:91:81:17:E6
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584FCCC6933F1BEAAF68E2B542E0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa
Signing time:             Wed 11 Nov 2026 02:00:12 +0000
ROA not before:           Wed 11 Nov 2026 02:00:12 +0000
ROA not after:            Tue 09 Feb 2027 02:00:12 +0000
asID:                     14618
IP address blocks:        204.8.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cc:c6:93:3f:1b:ea:af:68:e2:b5:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Nov 11 02:00:12 2026 GMT
            Not After : Feb  9 02:00:12 2027 GMT
        Subject: CN=6038a222-4b8e-4d5d-907d-4326af0e2059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:3b:cf:22:ba:98:c8:21:a3:46:aa:a9:14:
                    c6:a2:a7:a5:9b:d6:d5:2d:3b:b8:66:4a:87:24:7c:
                    fd:7b:44:a8:70:77:00:7e:2e:7c:3d:65:f7:6d:6a:
                    43:75:9b:2c:9e:c6:5c:a3:59:e5:a1:4d:d9:6e:c9:
                    ef:4e:cf:f2:dd:fb:b4:05:ac:20:e8:02:e0:3a:b4:
                    6d:2e:fc:f6:cc:82:65:da:c9:2d:29:4b:de:4d:f2:
                    94:bd:ea:e7:4b:13:ae:28:56:2c:95:46:b1:1d:08:
                    40:18:fd:24:7c:08:34:64:2b:bc:48:e1:62:ab:0d:
                    f3:38:dd:7b:de:e7:20:da:09:b2:a7:72:b8:1a:f8:
                    c8:fb:92:2a:d3:fe:7d:e9:a9:64:b8:25:d1:6d:57:
                    54:88:78:dc:f3:3c:86:d1:fb:17:82:ee:08:46:76:
                    35:7e:a8:10:db:d6:f0:aa:8b:27:97:40:45:b0:53:
                    59:3b:b2:00:96:c4:38:aa:7f:af:cf:f0:64:c7:1c:
                    b2:40:34:f1:50:46:7e:87:0a:7f:b3:17:63:27:97:
                    2b:11:92:96:14:e9:b0:10:6d:5d:65:08:74:91:59:
                    47:0d:c2:25:2d:d3:8c:67:e5:34:85:df:d7:af:76:
                    62:a6:18:02:3b:80:2d:33:ec:d1:c2:4d:13:e2:49:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:89:49:59:16:D1:C8:58:5E:6C:F4:EF:18:65:BB:91:81:17:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:76:ac:d4:4b:b5:cb:12:c2:06:4d:3d:de:98:ef:02:96:
         7a:87:5d:76:b6:68:0a:b4:42:29:82:a1:8c:43:65:97:87:c9:
         17:49:7b:f6:6d:d1:55:8c:0f:16:7f:ef:81:35:d8:5f:50:07:
         11:2b:36:2f:ee:55:71:a8:18:39:0d:88:28:c1:a2:67:02:89:
         cf:94:80:da:ad:0a:96:46:90:18:a4:95:d3:d7:14:94:d3:c8:
         0f:ec:e1:b7:9a:ee:f3:a9:9e:92:63:fa:40:8c:6e:97:8d:b8:
         b6:da:2c:2f:ae:eb:e0:ee:09:88:02:05:77:76:d9:f0:13:2b:
         25:7a:4d:9b:b6:eb:ec:47:3b:c1:ca:7b:28:f9:ee:05:e0:fa:
         ec:3e:52:27:52:c5:42:42:7c:eb:cb:04:a0:2f:a2:5e:ee:30:
         7a:97:96:4a:a2:93:9b:d7:21:3d:09:08:67:5b:8a:25:80:75:
         8c:39:29:51:df:b9:b5:77:d2:1a:f8:dd:de:5f:e7:25:5f:7e:
         c9:84:6a:b7:a8:09:37:38:cd:12:f7:b5:c9:90:7c:0c:4f:18:
         22:e4:39:3b:89:3e:24:93:d0:af:46:c3:4f:ac:64:19:ac:ec:
         2f:7d:53:93:d4:28:8c:51:c4:76:fb:61:65:47:69:3b:e0:16:
         3e:02:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----