Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
File:                     3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json)
Hash identifier:          1CMKWnH31ABeX633s9arkhAl5oycTPCU8VGTAqFqq6o=
Subject key identifier:   66:C2:FF:19:E0:F3:20:41:5F:AC:1B:08:1D:B7:B4:75:3E:51:B0:6B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858484515801BF19AED437FD97100
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14061
IP address blocks:        192.81.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:80:1b:f1:9a:ed:43:7f:d9:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=64c99bf2-ceeb-4602-aed3-770bef9b86c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:b9:30:6d:d7:a7:ef:6d:e5:43:98:24:46:
                    2f:27:5c:fb:03:ed:99:e8:0f:26:31:f3:fc:5c:11:
                    b2:6d:01:74:bd:cd:1d:c2:1d:81:54:18:85:fc:e5:
                    a1:c9:7c:6a:93:5d:a2:b7:4d:e0:e8:9d:0b:00:7c:
                    da:33:b0:7c:a5:30:c5:80:40:1a:8e:d1:ac:53:d6:
                    08:f4:4f:17:8e:bf:9d:d8:a0:14:23:8c:f1:65:d9:
                    a3:8d:a6:25:2b:05:75:4a:a2:16:6b:e0:2e:c4:e3:
                    05:42:13:11:70:30:27:9b:7a:2d:36:32:e1:d8:2d:
                    4a:3e:01:56:18:86:c8:56:37:a5:1b:dc:b2:6d:1c:
                    52:d2:0d:1e:71:77:ca:75:8e:08:e0:e3:73:9b:96:
                    be:ce:93:9e:89:d2:f5:91:08:47:93:56:e4:57:ee:
                    48:a7:e3:dc:20:d8:1e:c1:ce:7f:af:b2:da:a6:29:
                    83:b7:ac:3e:47:75:36:99:58:2c:b4:aa:e0:c9:e5:
                    44:68:76:b5:c2:1d:46:f3:a7:4c:82:68:4e:33:df:
                    af:37:fe:61:d3:c8:4e:17:7b:8a:8b:9f:56:45:73:
                    a7:81:03:2d:2b:0e:0e:ae:f8:81:64:72:8c:26:d0:
                    6d:b2:64:c8:3e:08:28:38:3d:6b:4d:ea:22:45:d9:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C2:FF:19:E0:F3:20:41:5F:AC:1B:08:1D:B7:B4:75:3E:51:B0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:49:28:fa:92:2e:80:fb:e8:70:00:93:cd:b6:b9:47:bf:
         c2:10:a5:a1:0b:e9:2c:07:4c:fd:96:19:d0:46:de:51:2b:17:
         c9:7d:c1:c0:f2:3c:ea:1f:88:9e:b1:f9:c5:5e:fa:03:4f:2d:
         ee:59:b7:03:e1:21:67:4f:86:4f:d1:38:52:ef:84:a8:15:68:
         69:bd:7a:3a:bf:ff:c0:69:f7:3f:15:50:bf:bb:07:80:91:10:
         94:fc:b3:cc:a4:14:65:ed:09:01:24:da:ab:a4:15:78:74:6c:
         7f:87:22:f0:b0:11:1c:64:17:69:7c:70:8b:b7:5d:f5:50:78:
         3e:e7:b0:bb:68:4b:48:82:5f:a5:04:1e:15:76:9d:bd:b9:8e:
         0e:a6:08:b5:a9:9e:74:7c:0c:44:86:e1:df:e4:20:98:36:99:
         e5:63:c8:fa:92:37:59:8d:b2:f5:2c:f8:f4:9a:58:c7:b1:36:
         b3:1c:60:a4:25:bb:fc:a4:b9:16:2a:05:d8:ba:fd:de:fa:99:
         f4:62:91:91:ef:55:f3:c3:4c:55:c7:79:61:e2:30:e2:29:26:
         9e:3a:08:44:d3:a0:35:5d:ba:e3:eb:ea:83:86:db:70:a3:82:
         b3:b4:c6:69:2b:bb:a5:31:46:40:cb:90:37:5a:76:e6:1e:60:
         8b:01:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:44 2025 by rpki-client