Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa
File:                     c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa (raw, json)
Hash identifier:          mLXloewKT0glS8GrMpkLbrWHw+pNqa51h1xrT711mqs=
Subject key identifier:   4A:B6:FB:BF:75:DF:38:CA:B1:3B:49:5A:EE:10:33:4E:21:59:39:8F
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F432858481C9A888D31154E67B6C3DA50
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     33132
IP address blocks:        216.99.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:88:8d:31:15:4e:67:b6:c3:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=2f1c77b6-d761-45d4-a187-21463c0d20e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:71:e1:b4:48:86:0a:86:06:c6:ee:21:31:
                    79:e7:0a:f3:8e:8d:49:0d:44:9c:74:e3:04:65:ab:
                    59:c4:13:a1:f6:73:78:88:01:73:ad:e7:ea:65:84:
                    19:50:87:54:05:c3:36:d6:ad:c4:d0:d9:51:df:f8:
                    06:8e:a9:f7:d3:32:91:ed:75:31:ec:b4:26:a2:10:
                    c1:70:be:ce:fb:17:a1:4a:6f:78:09:af:ef:8c:7a:
                    84:e5:e2:ea:c7:f9:f3:24:a1:37:8b:3b:f3:aa:5a:
                    a5:09:0e:d3:14:0d:1d:82:d5:98:e3:22:e6:2e:6e:
                    5d:ed:4a:dc:9f:49:12:c9:41:83:b5:7e:ab:2d:d1:
                    60:92:5c:98:d5:c1:e6:93:67:58:7d:96:49:82:28:
                    d8:71:82:90:2d:7f:be:bf:58:ef:c2:ba:78:54:ea:
                    dc:6b:fa:e4:d7:dc:60:52:e3:4d:75:d0:e3:f2:fa:
                    da:d3:0f:67:79:be:9e:79:1a:4f:a3:0f:4d:aa:5f:
                    7f:fc:da:d8:38:27:3c:9c:19:64:d6:27:5a:35:6b:
                    fd:04:a2:6f:5a:87:9d:b6:b9:2f:9b:5b:c4:2e:3f:
                    95:5b:ba:40:c4:48:60:d7:f7:e0:8c:4c:e3:29:ea:
                    3c:96:12:b5:fe:25:aa:7a:0a:dd:7d:88:a2:8e:cb:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B6:FB:BF:75:DF:38:CA:B1:3B:49:5A:EE:10:33:4E:21:59:39:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:07:8c:43:80:af:c5:8f:06:49:c8:a4:61:d0:ea:24:f7:1f:
         02:f8:50:08:9c:b3:02:53:02:05:2f:ab:3a:2a:c6:84:52:32:
         eb:87:66:5f:24:9b:30:f2:5a:eb:b9:fb:f9:6f:a4:42:7e:c6:
         f9:63:5e:f7:67:11:aa:8a:fd:b8:0d:fc:73:be:07:cd:af:c3:
         fd:67:62:f5:b6:0f:20:49:b9:d8:a0:a1:e2:d1:8f:ba:2e:db:
         57:e9:c8:08:60:ea:be:cc:6f:40:a3:c3:7a:94:d5:2b:9b:a3:
         6a:a9:7f:79:de:e9:0d:a4:6f:59:74:d2:00:4b:51:d1:d2:2e:
         a9:6e:c3:b5:26:8d:23:50:8a:d4:85:e7:9c:23:a6:dd:63:2d:
         45:38:9b:41:5e:86:6f:35:1a:35:33:07:56:6e:37:3a:05:d7:
         ac:0a:ca:28:92:fb:e5:26:c9:0c:89:38:40:a4:30:25:ce:71:
         ae:2e:2a:0a:ba:35:ac:ad:12:c5:84:df:c2:5c:be:c6:70:21:
         52:31:0c:9e:e7:d7:ff:ec:98:3e:ba:19:3a:8a:d2:c1:7b:1b:
         1c:35:50:cb:32:35:b5:44:b5:c3:69:ae:05:ac:72:a0:0c:3b:
         12:93:15:fd:f3:b5:9d:9b:b9:60:fa:8c:a3:c4:b0:86:c1:e8:
         c8:f5:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:11 2025 by rpki-client