Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/440dbe60-56ab-31a6-9810-6cffb144aab5.roa
File:                     440dbe60-56ab-31a6-9810-6cffb144aab5.roa (raw, json)
Hash identifier:          ekSi/M5TUFzpTzlEXBDkmGM9Tx9mmE31kQ+Bfh1perM=
Subject key identifier:   B3:49:03:E5:0E:7C:FA:27:7F:FF:65:5A:A3:8F:A7:C7:EC:18:D0:A8
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584863CB078201E208ED9575BE00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/440dbe60-56ab-31a6-9810-6cffb144aab5.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     41378
IP address blocks:        216.38.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:07:82:01:e2:08:ed:95:75:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=6ce55b3a-8521-4d6b-844e-a1e2e111e286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:31:2d:39:e6:34:aa:da:70:1b:07:4d:e4:
                    11:b0:9e:99:ca:d2:a1:73:05:e7:6c:a5:83:0f:1b:
                    a9:18:09:be:89:e2:96:e5:d1:33:83:9d:af:6c:3a:
                    6f:c1:23:e8:a8:ad:0b:50:85:1f:3e:38:73:ba:ac:
                    c9:36:2b:a4:47:96:fd:c8:6c:fe:bb:66:30:88:8a:
                    00:40:31:ad:f8:a9:e3:53:87:d5:62:f9:1f:1c:74:
                    97:6c:12:8b:1b:90:a9:fe:34:13:e8:61:3c:57:5b:
                    03:68:55:a8:8c:bd:46:0a:41:04:70:86:4c:41:06:
                    a8:25:05:e2:d3:5e:a7:fb:77:e7:7e:3d:60:46:1a:
                    db:ca:f2:9d:2b:40:08:05:41:e4:22:39:56:64:42:
                    89:02:b9:7d:4b:aa:eb:5f:69:3c:10:03:9f:4d:29:
                    64:f8:48:55:45:f4:c7:55:6d:b0:05:49:ca:98:36:
                    c9:99:e4:de:61:29:79:de:3f:e1:e5:f7:d0:fb:22:
                    50:25:86:c4:2f:b1:4a:e0:14:a9:b3:ca:42:cb:0e:
                    bb:2a:ac:e4:23:dc:c5:74:12:8c:e5:0e:9c:79:b0:
                    e9:f6:65:35:bf:c0:93:22:27:aa:26:ba:8b:e6:eb:
                    b8:da:8b:ce:0a:9c:2c:0d:c5:27:59:41:19:ec:fa:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:49:03:E5:0E:7C:FA:27:7F:FF:65:5A:A3:8F:A7:C7:EC:18:D0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/440dbe60-56ab-31a6-9810-6cffb144aab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:32:dd:41:25:39:c0:77:dd:73:55:9c:41:f1:ec:20:b9:82:
         19:6d:6c:cb:03:6e:b6:b4:e9:25:30:2b:0a:08:ae:b0:e6:fd:
         ce:23:5e:87:5f:94:43:0f:95:b3:f9:69:81:2c:77:ec:c7:3b:
         f8:bd:a0:b3:c1:05:f1:1d:30:7d:ad:0b:70:d7:d4:ce:d9:bb:
         80:38:4e:8a:82:32:6f:59:e7:52:28:97:76:bd:04:02:db:f6:
         bb:c8:65:7b:71:ab:71:f6:48:79:c4:3c:51:1a:e1:34:eb:08:
         4b:5c:8b:25:c6:73:fc:a3:7c:93:88:68:e9:d9:22:18:5d:d9:
         07:99:cf:ef:6a:4c:2f:c8:9f:1a:b1:66:02:08:5d:49:bd:ad:
         35:ea:56:9b:5a:6a:bb:10:f1:0c:41:81:88:41:a0:75:47:12:
         52:62:7a:b9:87:5d:62:d5:b0:df:85:f6:b0:0d:35:d5:15:0a:
         c4:99:22:91:b8:61:77:78:a2:00:0b:4c:8d:0b:31:d7:c4:30:
         a6:39:a6:cd:19:36:c6:78:8a:15:2e:a9:5f:41:a1:c3:63:98:
         a0:3b:60:99:8f:a3:09:06:34:39:16:da:69:f4:2d:cf:31:2f:
         21:fa:a0:54:27:f1:5e:0b:42:1d:c5:25:59:e0:3b:4b:eb:81:
         13:c9:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:13:33 2025 by rpki-client