Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/8b6cdfc9-34ae-3518-94a0-08ec51718f9d.roa
File:                     8b6cdfc9-34ae-3518-94a0-08ec51718f9d.roa (raw, json)
Hash identifier:          GB7O3j51edmAds//z7rpH+EfS+F8vorUnMgFDjvKyHM=
Subject key identifier:   EF:54:AC:43:BB:66:EB:A7:88:01:7F:36:41:87:31:57:41:E3:1C:7F
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F432858482A8FD69FC49C03DFD8522800
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/8b6cdfc9-34ae-3518-94a0-08ec51718f9d.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     26241
IP address blocks:        209.222.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:d6:9f:c4:9c:03:df:d8:52:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=2ea3fc1c-a6ec-4f84-a397-ad3e7620d7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:76:00:77:a7:a4:af:b8:37:e3:33:ad:e2:
                    21:7a:34:01:1d:8c:d2:f1:dd:8f:0e:f4:89:84:9a:
                    cb:bf:b4:78:32:69:2b:65:07:f5:18:3a:e2:0f:92:
                    fb:be:ec:61:73:78:26:60:ed:59:86:de:b5:5d:04:
                    d7:6e:2d:55:a8:da:8e:3a:72:62:1e:46:41:73:e9:
                    e5:11:1c:06:20:9b:bf:2e:9a:a9:51:c0:06:bd:d5:
                    68:d4:50:69:c9:5f:f5:f3:c1:3c:cf:88:34:69:55:
                    26:c2:cb:f6:3f:3d:bd:a4:10:2a:0d:9e:d8:f6:af:
                    a3:9e:8e:30:a9:72:6f:46:57:cf:e1:eb:7b:b6:5d:
                    f4:21:ed:32:76:b8:0c:1f:b0:34:63:63:13:8c:39:
                    be:6f:a3:b1:dd:93:c4:a0:29:18:9b:2e:83:6e:a7:
                    c5:17:af:64:5e:94:b1:64:ae:93:e7:2d:ab:93:dc:
                    f3:eb:c9:43:d0:b3:f6:da:bd:33:91:56:3e:b5:e9:
                    b4:5a:61:e6:54:45:36:a0:8a:ab:62:c1:1e:22:08:
                    d2:39:a2:2e:9f:96:6e:24:f6:f5:f3:0c:83:98:63:
                    7c:9f:88:ce:a5:ca:20:19:64:85:25:a4:cb:34:70:
                    e3:7c:71:08:70:70:03:1d:a9:7c:17:a6:69:e4:cd:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:AC:43:BB:66:EB:A7:88:01:7F:36:41:87:31:57:41:E3:1C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/8b6cdfc9-34ae-3518-94a0-08ec51718f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:96:f3:cf:a3:10:c7:50:7a:d5:b8:9c:a9:a3:c0:e4:b3:
         63:8d:d5:ad:f7:b1:6b:c1:f2:24:73:1d:f5:b8:fa:75:d3:d5:
         27:98:f2:e7:74:e9:ae:72:69:7b:0e:d7:1f:c3:f9:80:59:be:
         e1:23:37:b9:53:c5:fb:11:bf:e8:33:83:e7:b5:46:eb:12:4e:
         78:43:2e:cd:36:03:81:7f:f0:d9:98:dc:9a:e3:a8:e4:06:be:
         2d:d8:7f:67:d0:ce:ee:bc:e9:7b:1d:63:94:7d:c9:97:a3:70:
         79:5b:f2:dd:f5:0e:3e:15:20:57:aa:0d:38:a9:55:68:19:2f:
         89:23:1b:40:2c:d0:f9:e4:04:b5:c1:67:1f:2d:49:6d:72:44:
         9c:3d:a6:f8:58:6a:8b:bf:3d:75:c0:a7:c3:b2:e2:37:81:2b:
         2a:b2:34:ed:63:44:42:97:48:9c:27:47:06:c2:6d:50:57:b3:
         c8:19:9c:ad:6f:6b:18:5b:4e:95:d2:3d:17:d8:b2:23:e8:9f:
         f3:7a:ea:b4:0d:83:ed:9a:d4:ca:7b:52:4e:ea:60:d1:2d:c7:
         bf:fe:3c:1f:3d:f0:7a:dd:40:40:b1:6f:62:c1:c4:eb:f3:c9:
         99:69:0b:35:83:78:d2:04:ee:8b:f0:1d:1e:79:52:db:cf:24:
         09:5e:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:59 2025 by rpki-client