Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa
File:                     fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa (raw, json)
Hash identifier:          lHyh2w7w1Lgbq9C6hVkb+/02MWU0nZc/6xRv7w0LM1A=
Subject key identifier:   FF:95:6D:30:FA:CA:AD:81:88:6C:DD:B0:6E:5D:C0:E9:21:27:DC:0B
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858483B500BFE1B4397D0BB416680
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     394708
IP address blocks:        216.255.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0b:fe:1b:43:97:d0:bb:41:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=0719f096-8ee6-425d-b2ac-e522d4009415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:3d:27:3a:83:79:34:19:37:b4:f4:b7:97:
                    8d:54:33:55:f3:e3:ab:6a:cc:3b:2e:09:e5:de:f3:
                    74:ac:21:99:2a:da:b1:b4:d1:df:31:cf:7c:32:73:
                    7f:74:59:5c:34:18:42:06:3d:e7:d7:2b:66:6c:74:
                    05:17:6a:40:f6:de:24:bb:6d:59:bc:c5:36:eb:51:
                    e9:2c:63:3f:75:e7:36:19:47:02:a1:c2:b8:ec:e9:
                    d0:a6:28:22:33:e7:72:e4:8d:c9:b6:82:da:87:92:
                    2c:82:9c:25:c7:37:c6:3b:86:36:09:64:01:54:a2:
                    13:49:38:c1:03:8c:b3:91:93:f0:c8:e3:0f:76:60:
                    2f:7e:70:f0:09:4c:a6:0e:03:c0:ac:f7:cd:42:05:
                    4a:36:27:f6:e1:1f:6d:5a:18:8a:ac:a0:3a:97:29:
                    06:64:5e:98:6e:ef:70:aa:b5:84:03:1d:27:45:4b:
                    63:e0:8d:97:49:20:51:35:e4:1a:c7:e9:41:b5:47:
                    f4:6c:d2:c8:b4:c8:cb:61:43:14:4b:db:08:bd:39:
                    1e:5e:d2:6a:6c:8a:69:91:49:2f:e5:51:ee:56:3a:
                    d0:6a:ed:be:fa:55:a9:77:e7:e5:a3:1e:fc:36:ea:
                    52:7d:6b:02:80:e0:b3:b9:7c:f0:b9:d4:85:a4:39:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:6D:30:FA:CA:AD:81:88:6C:DD:B0:6E:5D:C0:E9:21:27:DC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:8b:12:40:a0:aa:64:3d:6f:f0:b1:18:c4:cc:f4:29:d2:
         bd:45:65:19:9d:f4:45:bf:5e:51:25:6b:e4:eb:6d:59:cc:aa:
         13:e7:86:6f:8b:93:f2:d3:7b:99:f1:71:17:d6:02:a1:2a:2f:
         6b:39:9e:1c:2f:e9:e5:90:f6:9b:7d:cf:a0:6d:99:2b:21:56:
         0a:be:87:4d:26:ed:89:ca:38:ff:de:bb:02:f7:8d:ce:0f:9c:
         67:3a:f6:bd:2b:01:28:30:55:d8:ec:1f:ee:b9:eb:d5:3d:2a:
         03:4b:95:6e:46:a2:4b:2a:e4:61:b7:86:eb:b3:28:7f:af:8d:
         75:aa:60:7d:62:2e:ef:7b:12:48:cd:12:04:71:ef:84:fd:00:
         0c:4d:ac:88:35:a4:72:91:64:d7:ce:9b:83:67:2a:8f:c6:fc:
         d7:bd:99:82:93:9d:d0:fa:9e:1a:6e:29:54:ef:31:c4:96:b5:
         6e:a1:48:53:4b:a7:26:45:bc:34:a6:92:8d:b7:e4:07:11:5d:
         0d:bb:46:ab:a7:8c:96:a6:9c:37:64:b0:b2:a4:e5:3d:dd:0f:
         37:20:d1:9c:4e:3b:3d:43:0b:b9:fa:56:be:c2:08:f9:0b:46:
         78:ec:ca:d3:7e:e8:f2:57:b7:29:9c:b6:c4:3c:b0:05:30:cc:
         1a:88:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:40 2025 by rpki-client