Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa
File:                     70024f6c-997e-38fe-a1b0-71e9db6be67e.roa (raw, json)
Hash identifier:          Lnl/UqdKUnVixDmG0iAFio7OQQR5kcslBXZGhMcGIf8=
Subject key identifier:   9A:A2:14:AB:69:25:60:CA:9B:AD:4D:59:00:4C:F3:B7:90:1A:E9:28
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F432858480A751F852264BB659EB30000
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa
Signing time:             Fri 29 Nov 2024 14:00:51 +0000
ROA not before:           Fri 29 Nov 2024 14:00:51 +0000
ROA not after:            Thu 27 Feb 2025 14:00:51 +0000
asID:                     2734
IP address blocks:        208.64.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:75:1f:85:22:64:bb:65:9e:b3:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Nov 29 14:00:51 2024 GMT
            Not After : Feb 27 14:00:51 2025 GMT
        Subject: CN=3b0e09c0-f981-49a7-b644-b120d65f3c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:d9:b9:e5:d5:98:de:37:17:4d:64:ba:7b:
                    5d:1b:cb:bf:03:a0:c6:7a:98:6d:c1:7a:e8:82:51:
                    83:a8:80:3b:f0:ee:f4:82:fe:0a:1a:c9:d7:7d:b1:
                    bd:84:b7:7d:db:ef:95:7c:4b:48:68:41:59:c2:b2:
                    e4:a5:2b:69:81:53:c5:29:09:90:be:6b:3c:0a:0d:
                    a3:a2:a5:fe:e0:29:5c:b4:cc:be:d1:b3:00:52:7c:
                    03:f6:4f:54:71:46:b5:7a:2a:6f:b9:8d:01:61:f0:
                    e6:e0:8d:48:64:3b:7e:25:ef:5f:ed:1e:93:d5:7f:
                    d1:ce:aa:89:3c:cb:d4:fb:1d:55:f5:d1:13:69:b7:
                    5f:c5:9c:3d:6c:91:93:20:1e:78:13:2d:be:ae:c0:
                    01:23:82:c2:b6:d6:45:68:98:f3:22:58:75:45:e7:
                    c2:42:bc:17:99:96:ab:c8:fc:b0:8d:5f:53:ea:80:
                    e9:79:ea:d7:85:aa:f0:52:23:7d:54:b1:e8:3b:2a:
                    6e:92:68:ea:68:ea:29:55:c4:14:3f:47:af:74:50:
                    e7:1f:da:43:f7:9b:7e:6d:ee:d4:77:b5:a9:3a:7f:
                    cb:be:c5:ef:78:55:90:3c:94:03:58:3a:6e:9a:76:
                    2f:b2:18:fd:88:d5:40:28:b7:90:70:ca:4b:44:94:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:14:AB:69:25:60:CA:9B:AD:4D:59:00:4C:F3:B7:90:1A:E9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:c0:12:d1:5a:45:0d:e0:88:e2:ff:fc:c0:d2:0f:b8:2b:
         a2:6b:0e:98:55:33:46:e2:16:b7:e9:0e:7b:83:2f:63:43:4f:
         1c:0e:d1:0a:cb:51:e2:ae:7d:c8:a8:84:8b:3f:af:89:ff:3b:
         3f:e7:cf:0e:ef:ab:61:36:c2:8e:32:59:1e:1e:76:af:a9:fb:
         da:21:60:9f:96:69:30:4d:ee:e9:f6:ab:b3:bc:03:7b:b5:cb:
         4a:a7:04:a4:83:c2:90:ee:60:79:cb:72:43:c2:75:42:87:0e:
         17:c2:d9:5a:73:35:0f:55:67:a0:68:37:71:1b:fb:d0:4f:77:
         2a:d4:89:63:c5:c7:81:7d:c6:09:d6:e1:09:a9:2e:f6:cd:e2:
         2d:47:93:78:a1:79:24:bf:1d:2d:14:1c:72:70:a8:ac:66:58:
         2d:06:d9:f1:d4:43:88:83:bb:cf:dd:06:f2:11:51:c0:f5:c0:
         70:9c:ae:c8:99:fd:cf:eb:96:58:1b:d9:bf:e4:77:a7:a7:36:
         73:53:b5:80:e7:e9:29:85:2d:24:f5:b3:68:ef:3d:a9:c7:83:
         ab:1e:f9:4a:a5:5e:9a:80:e7:4d:c4:46:55:29:0f:fc:78:e2:
         c4:be:51:b7:cd:87:7d:81:67:c6:c1:15:2c:40:27:7e:af:db:
         89:08:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:50:06 2025 by rpki-client