Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
File:                     8edcb168-4dfe-3fff-883b-ec95736ecd00.roa (raw, json)
Hash identifier:          To7+FyfP6s5h0g5fvOyt6V4TbvYpsvq0Rd1vgH465DM=
Subject key identifier:   62:FA:F0:D1:41:81:4C:B7:EB:66:65:F3:49:D7:19:AC:79:A2:D3:11
Certificate issuer:       /CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Certificate serial:       010D0C9F4328584840E5588888830B8717E4BE40
Authority key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     0
IP address blocks:        149.112.96.0/22 maxlen: 32
                          206.81.80.0/22 maxlen: 32
                          2001:504:16::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:58:88:88:83:0b:87:17:e4:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=cff471b0-3fdf-4212-9c14-e20251101084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:58:8e:f7:1e:f8:79:66:9f:e0:93:41:79:
                    d5:ed:c3:bb:2d:6d:d0:2b:f0:60:59:3d:72:07:ca:
                    de:70:43:a0:8d:b6:a4:33:13:d7:81:09:75:c6:d6:
                    0a:28:13:e4:c7:75:ea:ab:40:61:aa:e8:18:c9:2f:
                    7b:b3:3b:68:d2:d5:89:47:ea:82:c6:d8:80:ad:c5:
                    56:a1:6a:06:93:6f:79:c6:37:40:c6:cb:a5:c5:9d:
                    8c:ed:3b:07:4f:4d:bb:15:62:52:9e:0a:92:7c:14:
                    6d:93:8f:d4:8f:cd:ba:fe:63:3c:3e:98:fd:b7:64:
                    39:de:8e:d5:dc:e2:f4:26:45:57:ea:2c:4c:7c:90:
                    b2:62:48:b8:a5:c2:6b:39:02:f5:a7:99:6f:24:90:
                    a8:b8:c8:fe:1c:c9:91:2e:13:94:d9:fd:a1:f3:1b:
                    94:3a:2a:46:6f:3f:07:f6:d3:b5:67:af:01:6c:dc:
                    22:03:ff:b0:ba:c2:a1:ab:1a:85:f1:f1:08:be:7c:
                    4c:4d:26:57:89:77:99:31:b2:78:b2:0a:89:08:d2:
                    d8:66:5b:f6:42:04:69:f3:46:74:a7:4c:71:c6:0e:
                    64:03:95:1e:ad:2b:ce:32:92:00:23:21:14:6a:17:
                    6c:ba:f5:00:5b:7b:32:04:dc:3a:d7:bf:df:4a:9e:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:F0:D1:41:81:4C:B7:EB:66:65:F3:49:D7:19:AC:79:A2:D3:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl

            X509v3 Authority Key Identifier:
                keyid:58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.96.0/22
                  206.81.80.0/22
                IPv6:
                  2001:504:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:fd:cf:6a:ea:a0:d7:e6:b9:b5:ff:7e:e4:b5:c3:9e:21:
         68:16:c5:a6:98:a5:f6:08:65:ef:b1:05:3b:2c:13:f2:a1:f0:
         fb:51:8c:b3:7c:df:2a:23:4a:37:69:6d:dd:1c:fb:5a:c5:ff:
         e1:8b:26:08:be:ff:8d:59:61:0d:d7:28:46:81:98:50:4f:cf:
         a9:32:6d:91:3e:0e:de:81:3c:96:7b:1d:f5:65:e6:fa:a2:9d:
         16:14:f1:c9:fe:40:f8:6d:3e:e1:68:2f:41:9a:38:6a:84:f1:
         44:7a:31:84:86:78:65:9b:28:cc:5b:da:49:dd:10:74:5e:45:
         45:b8:6c:28:0b:2c:9b:88:73:5d:40:84:ff:45:d8:69:2c:83:
         a4:93:a6:d2:24:62:4d:f3:14:b6:11:a8:12:c3:d3:a1:8a:1b:
         7c:8b:ea:3b:ec:21:14:9b:1f:7c:10:ab:4e:57:48:6a:6a:df:
         ba:d7:62:54:22:62:16:22:5e:2f:dc:0f:e5:ae:66:e6:03:c4:
         a4:e5:95:99:40:54:d4:f6:4c:87:2c:60:35:fc:8c:13:1c:f5:
         86:7e:0a:5e:d1:c9:dc:72:28:f3:4b:1a:a1:3b:93:a4:0a:4b:
         ec:d6:6a:68:ba:b4:db:74:54:9a:0c:ae:5e:a4:54:10:ed:a7:
         9f:59:d4:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:54 2025 by rpki-client