Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa
File:                     b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa (raw, json)
Hash identifier:          SAhq/GEBTNHI/RuCyyTFa0h8AypD0AgATox+Nh+ZTY8=
Subject key identifier:   C0:C1:F5:45:B7:C6:DE:6C:CB:7E:2B:FC:43:B8:2D:7C:B6:55:00:A9
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F4328584F7BB314257D440251CD089E80
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     14618
IP address blocks:        165.140.58.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:14:25:7d:44:02:51:cd:08:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=8dcfe141-310b-4d75-933d-a429c93d0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:a1:47:8c:cc:a9:79:b6:6c:7a:e6:15:8f:
                    23:73:fb:fa:68:47:4f:35:52:92:90:f2:9c:f9:ed:
                    de:a3:82:a4:e6:1c:34:71:cf:ce:d5:be:91:bb:38:
                    c2:a3:e1:fd:eb:b6:3d:0e:09:bf:25:68:b0:2e:22:
                    ca:dc:f2:3e:d1:c1:12:16:ba:be:5c:7e:bc:1e:bb:
                    37:88:fe:29:00:de:b6:50:c1:2b:2f:a1:1d:e8:b4:
                    7d:80:6b:d7:e5:5d:28:7b:83:8d:f7:94:e7:51:b6:
                    ef:fc:67:75:22:b0:f8:aa:02:e2:ae:e6:40:78:56:
                    f0:77:68:5f:78:46:07:ca:41:3f:cb:47:e4:9d:bb:
                    84:56:67:4f:20:2f:42:53:16:b6:d5:36:f6:8f:dd:
                    96:bd:18:b9:7a:cf:06:68:4f:68:e8:c3:1e:6b:aa:
                    3d:4b:3e:6f:c3:56:27:5e:44:c0:b4:41:a7:dc:3a:
                    7f:8f:1c:64:0e:4c:1b:dc:55:f0:38:6d:7c:39:e3:
                    9b:8b:b6:eb:a0:13:85:2e:d5:65:ce:5a:b3:1c:d7:
                    f0:45:9c:3b:01:7e:12:e3:77:63:21:45:17:d8:c9:
                    af:8e:6a:e8:52:35:a0:9c:64:ff:f0:00:27:9a:1b:
                    42:a6:bc:f4:9c:f5:cc:3c:6f:76:63:d6:70:bd:7c:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:F5:45:B7:C6:DE:6C:CB:7E:2B:FC:43:B8:2D:7C:B6:55:00:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:14:0e:e7:4c:1b:ec:c6:53:bf:4a:74:63:21:26:89:ac:
         7b:90:bc:b6:54:2b:e6:c2:96:16:5f:88:c3:bc:bd:cb:2b:4b:
         3d:9b:42:1e:17:84:5c:5e:bf:ba:2b:63:d5:bc:e0:a9:40:8b:
         24:25:b8:74:c7:5c:34:fb:db:8d:23:47:6a:03:9c:29:fa:72:
         83:e4:63:84:70:03:51:a3:9f:e6:67:14:68:3b:14:b1:0c:07:
         31:92:a3:bd:5b:92:f2:f2:db:79:4c:dd:99:f0:71:b7:56:f9:
         8c:f7:92:a8:f9:96:8d:c7:38:9b:a6:89:5d:24:44:a5:29:b6:
         6b:c2:3c:b6:74:a6:36:e5:04:29:ca:da:41:79:99:10:41:57:
         b7:07:35:a5:32:d5:4e:45:f5:da:08:b6:1a:54:8b:f8:07:36:
         50:6e:44:a7:32:2f:22:6c:19:9e:5a:9b:b4:36:82:66:3a:22:
         5d:ae:30:78:df:da:05:5a:72:4e:68:7f:71:1e:18:a4:cc:f3:
         16:73:22:4f:f0:ff:ed:11:8c:21:4a:b1:46:a2:ce:43:29:3c:
         d0:ea:c6:7b:96:dc:db:1c:fe:55:71:33:dd:82:4e:9a:77:71:
         54:1d:6a:8a:56:ba:52:10:67:6f:ab:77:35:9b:6c:d0:aa:18:
         55:da:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----