Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
File:                     6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa (raw, json)
Hash identifier:          YKXl6BbVz/jVClPJumAAeZbTC1pZB26nw8tLz+zmPPE=
Subject key identifier:   E2:69:34:28:D7:FA:B9:13:6C:1C:80:71:32:FF:A3:81:F1:6E:2B:4D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848424ADCC98FCFD0D0BB6E8688
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     3561
IP address blocks:        209.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:c9:8f:cf:d0:d0:bb:6e:86:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=478dd26c-5991-4674-aabc-e5dd0b8f9606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:0b:81:b3:b6:84:53:0b:1f:12:34:8b:19:
                    fe:8b:48:7e:2e:90:52:ff:8e:4b:7c:c6:79:6a:3d:
                    7d:31:cd:f5:72:68:7e:46:13:6d:6a:1e:07:f0:9b:
                    34:ca:a2:fb:22:42:66:3c:f9:b7:3b:37:18:f8:20:
                    98:54:fd:63:98:ce:8a:d9:8b:af:95:7d:19:86:62:
                    b5:11:c8:f7:1c:e7:2c:ba:8d:76:c4:12:d9:ce:4c:
                    47:5a:f8:5f:9b:5c:7c:82:5d:e2:9e:da:b3:0e:49:
                    96:a1:be:9d:02:1f:55:b1:07:25:b5:54:58:82:77:
                    64:53:57:a0:43:cf:fe:6d:fb:cd:27:9b:c6:08:04:
                    01:45:91:66:ee:7b:7a:8b:e4:4a:e6:ad:ac:20:ed:
                    d3:67:0b:98:ba:f3:da:2a:0f:db:b0:37:53:f9:ae:
                    e7:93:a8:51:1d:e2:8c:a9:30:0e:f2:fe:7b:99:3f:
                    61:5a:f3:df:98:40:37:a3:15:9c:e3:9b:b6:2f:27:
                    01:d4:9d:dd:c7:c8:82:c9:4e:f8:95:3b:a6:b3:a0:
                    a4:5f:a9:9e:e3:26:79:23:cc:6b:b8:03:1e:4c:62:
                    84:6a:3c:07:6f:6c:8a:6e:c7:be:09:99:ca:f7:bd:
                    0f:3a:68:fe:55:c7:9c:c5:18:4d:5f:81:f6:f4:3d:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:34:28:D7:FA:B9:13:6C:1C:80:71:32:FF:A3:81:F1:6E:2B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:f6:74:8a:7a:11:51:1e:9f:89:04:0a:20:bb:33:04:2f:
         2b:84:e1:46:9c:f8:04:db:6d:1e:28:33:a1:49:61:5b:ca:ea:
         7d:02:d3:7b:9e:38:47:46:a3:84:03:2d:f9:3d:47:98:10:11:
         fc:9e:e6:92:cd:31:72:15:fa:88:df:fc:63:3d:53:1d:9a:97:
         9b:c7:e4:12:5c:c2:6c:5b:10:02:a9:58:19:d5:cc:ef:3f:4a:
         ce:b5:5d:72:d9:55:c1:9f:3e:d7:03:e0:4d:53:5d:23:6e:5a:
         6e:02:19:a4:57:27:c8:7f:c0:5d:a9:5f:5e:33:c4:41:c3:61:
         cd:43:85:cd:b9:9c:fd:02:96:a1:98:d1:6c:fe:51:67:0c:62:
         d0:ea:6f:4d:86:b2:63:1b:ba:d3:95:de:e6:69:a3:57:f4:06:
         15:b5:35:75:e7:9b:c2:d5:82:fe:cc:be:76:55:1b:0d:d7:6f:
         31:92:2d:4c:74:9c:97:59:69:ca:d5:41:b9:67:50:a2:91:6c:
         40:0b:15:66:c3:8a:df:4e:1f:42:cc:e1:3b:c6:ab:b4:82:76:
         34:4d:1c:4a:e0:25:c8:9b:d3:03:1b:bf:fc:61:a7:77:e6:b2:
         50:2c:68:ac:3a:6a:a6:e3:2c:71:5c:52:9c:ab:37:82:18:08:
         80:69:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:50 2025 by rpki-client