Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/c358f6cf-d086-3586-b864-c459648baab3.roa
File:                     c358f6cf-d086-3586-b864-c459648baab3.roa (raw, json)
Hash identifier:          GPZPyGj1W8z5XLTM1KQUNwKd2u+JrN1nl1J2vNBE5F8=
Subject key identifier:   8F:0A:14:E4:B0:9E:9D:4D:C6:50:D1:A4:18:E9:AB:8B:0E:B3:37:79
Certificate issuer:       /CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800
Certificate serial:       010D0C9F432858486AC59C3BB5CA58A9FAC40880
Authority key identifier: 3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/c358f6cf-d086-3586-b864-c459648baab3.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     51791
IP address blocks:        205.234.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:9c:3b:b5:ca:58:a9:fa:c4:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=f767fee3-d500-4a9b-ace3-f5664348de52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:55:22:e6:bc:7f:0c:28:49:ef:e8:56:e7:
                    0f:55:de:eb:2e:da:7d:e1:a8:58:92:3c:08:a2:25:
                    f0:0e:c6:95:2a:be:1e:25:a9:b9:57:a0:9d:0d:54:
                    37:21:64:45:3a:30:5e:77:9c:86:a2:99:5f:1e:1a:
                    4d:6f:b3:98:99:21:fc:4a:b3:45:c6:d4:6e:30:b6:
                    4d:c4:14:dd:bc:b4:dd:8b:37:47:8e:9d:50:32:71:
                    61:53:68:9e:e1:ec:1e:52:e7:aa:f3:74:f6:ca:29:
                    e0:4a:59:1f:1c:1b:16:7b:21:d2:78:f0:47:fe:21:
                    c3:fb:98:e7:5f:e0:37:81:29:b7:1a:0f:d1:db:62:
                    e8:e1:55:de:44:7e:af:09:89:f0:a9:5d:16:d8:7a:
                    23:90:39:9f:ef:49:3f:8c:2a:78:fc:fd:19:45:10:
                    84:27:7f:3d:28:c5:82:65:e5:1e:ae:b0:ab:6c:ee:
                    a2:b5:88:99:26:1d:d7:17:e7:eb:a7:a3:40:2f:87:
                    1d:2e:cd:66:13:44:d5:b8:0f:82:91:f9:36:a7:92:
                    f1:46:16:77:4a:0c:de:bd:e1:86:6f:f0:a7:af:59:
                    2e:c5:35:50:17:a2:3e:96:8f:3e:0d:9b:d1:00:04:
                    bd:0f:0a:2b:4f:e2:5a:4b:cf:f0:9f:8c:32:b6:63:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:14:E4:B0:9E:9D:4D:C6:50:D1:A4:18:E9:AB:8B:0E:B3:37:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/c358f6cf-d086-3586-b864-c459648baab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl

            X509v3 Authority Key Identifier:
                keyid:3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:3d:45:c1:ce:7b:5f:2b:85:61:f2:1b:a5:5b:79:a1:9f:
         88:76:aa:84:07:f3:b4:b8:e9:e4:23:80:77:8d:fd:8d:b6:22:
         4e:7b:f1:18:d8:81:ce:2d:f2:25:68:8b:47:2c:b3:c4:09:60:
         e2:53:69:c3:bb:a4:bf:24:53:2b:02:32:87:57:be:94:2c:d0:
         51:ea:ab:0e:15:5a:c6:63:bb:7e:db:d4:3f:51:e7:f4:25:85:
         05:ff:7d:ac:95:d8:81:72:71:d6:04:d9:6d:f7:30:de:64:b7:
         45:02:50:72:62:46:76:69:88:d4:6d:f7:52:49:5b:ae:d1:8f:
         53:b4:a1:af:79:ec:07:ce:11:1a:66:96:94:23:cb:06:dc:8d:
         b4:3d:5c:17:43:8d:d5:c9:91:50:ff:8d:93:6d:f1:13:33:2d:
         4c:59:b5:19:7a:e4:c7:b0:42:5a:a4:a7:56:bb:38:b0:e9:fb:
         c1:ae:a3:eb:2a:cf:a9:b4:f6:36:b0:05:ff:d2:3e:b2:bc:bb:
         9a:cd:3f:01:af:4c:6e:27:10:3a:8d:45:ce:c3:21:b9:a7:42:
         ee:72:e8:b5:57:f1:08:17:66:19:6d:99:d1:77:10:29:a9:2b:
         28:ef:ba:50:56:31:0f:c4:ca:b4:6b:cd:4c:ff:f6:27:74:39:
         e6:c5:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:25 2025 by rpki-client