Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/b922f3ff-83bf-3c6a-9255-844bf28a6b45.roa
File:                     b922f3ff-83bf-3c6a-9255-844bf28a6b45.roa (raw, json)
Hash identifier:          MgF5d5jE6isK3ogY0Gafy2ToYW6iwhou7Sa47rErioE=
Subject key identifier:   C9:91:17:03:0C:52:05:4C:CD:D5:6E:5C:B3:E1:22:0B:D9:0D:3C:00
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F432858483B500CD3A78E369EBCE8ECA0
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/b922f3ff-83bf-3c6a-9255-844bf28a6b45.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     7106
IP address blocks:        209.143.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0c:d3:a7:8e:36:9e:bc:e8:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=f4fb03b7-ae84-4e40-9138-d8df14a68c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:36:64:93:fc:a0:d8:cb:5d:d3:71:41:30:
                    09:d7:8a:82:65:83:b7:c6:ff:0d:e5:0d:c2:a0:c3:
                    be:b2:04:27:8a:9b:f1:e5:d5:ea:00:20:69:7d:6b:
                    5a:70:b1:44:34:7a:02:68:2a:20:3d:85:71:b0:d8:
                    20:74:ce:a2:41:43:bf:9d:57:92:fe:05:5b:3b:43:
                    36:ac:5b:6d:39:d9:b7:63:f3:80:e1:04:00:e1:75:
                    53:d6:43:93:a1:eb:5a:b1:13:ac:e8:27:75:3a:9b:
                    58:88:6c:aa:07:6f:29:d6:10:5c:fc:5c:01:49:9e:
                    15:71:e4:00:18:cd:b7:fb:a0:26:7b:fa:16:44:92:
                    3c:90:b8:e9:ca:bb:43:44:4f:8f:83:48:bf:b5:35:
                    f0:3d:14:5d:16:ca:81:e6:41:2d:b8:24:65:1b:ce:
                    fd:25:74:7f:b4:08:48:a9:3c:a9:f4:14:55:f8:77:
                    d7:ed:59:c9:6b:08:1f:7d:29:42:0f:ae:8e:71:cd:
                    2e:d5:ef:73:c5:fb:68:0e:ec:71:ab:7c:2b:97:3b:
                    36:5e:f0:9a:30:72:ee:11:de:78:b6:8e:00:43:ae:
                    6f:0c:39:c4:57:c4:26:e3:17:24:0e:d8:f9:49:b4:
                    da:12:54:43:fc:84:0e:b0:94:3b:6b:62:3a:b7:a3:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:91:17:03:0C:52:05:4C:CD:D5:6E:5C:B3:E1:22:0B:D9:0D:3C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/b922f3ff-83bf-3c6a-9255-844bf28a6b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:38:75:f0:7f:00:99:b2:12:c3:97:e6:65:01:8c:7d:7c:
         9d:19:fb:06:03:97:d2:03:58:45:54:73:25:3a:72:00:ca:6f:
         4a:f1:02:2e:9e:b3:9d:13:a4:79:39:b6:da:01:83:07:f1:07:
         b4:cc:bf:48:da:ca:21:71:aa:1b:4f:05:23:56:78:21:4e:be:
         92:c3:16:de:40:f7:3c:b8:60:9e:84:a5:bd:c4:83:96:78:54:
         8d:8c:92:d4:89:80:1d:79:8f:80:73:03:73:4e:24:62:23:a4:
         3c:a3:1f:78:12:18:37:8b:e5:e3:ab:50:5d:65:15:22:78:0c:
         33:59:d7:e3:25:f0:28:d2:82:e2:28:f2:e9:93:66:ac:12:b3:
         f2:e3:22:4f:fe:5f:67:62:ba:b6:dd:5d:c4:e6:d9:09:78:51:
         77:23:53:c6:fa:2b:01:3b:9e:f6:61:5e:59:fc:0c:20:ec:ba:
         4d:d3:90:09:e7:96:75:c5:28:ad:e2:b7:99:77:8c:a5:54:f0:
         aa:ba:40:eb:6e:cd:ce:4f:d7:97:82:eb:7d:af:08:c5:9d:c0:
         a0:fd:b2:00:c1:e3:7d:7f:bc:5c:35:b6:cc:4f:0d:a9:7b:79:
         ee:7b:86:f5:02:74:ae:2c:a8:90:db:59:c4:59:f3:74:bc:00:
         ed:c5:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:57 2025 by rpki-client