Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa
File:                     fea04f34-07b4-3082-99e9-e332389caf7c.roa (raw, json)
Hash identifier:          GWbvzOb9iFrjQHRhQbrAqQ76KUHWxhdWzhhxuvOs/6Y=
Subject key identifier:   6B:30:BD:C9:8E:D3:41:79:61:EF:E7:84:6B:BA:D1:2C:3D:8D:79:C9
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F43285848090FBE8C8AD0D4D66D7CD8C0
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:be:8c:8a:d0:d4:d6:6d:7c:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=95e39dff-e4d1-4a38-8061-300c177f7125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:07:9d:ef:b1:8f:f5:ca:6d:30:bf:97:8d:
                    41:35:4e:91:f6:33:05:97:9b:f9:5b:30:27:44:1e:
                    cc:13:40:e8:44:55:51:d9:ab:78:3b:b2:b5:8a:81:
                    01:fe:0a:a2:f8:08:82:24:24:41:ec:be:14:fb:e6:
                    53:d4:ff:1b:df:ad:be:5f:17:3a:b4:a6:ec:ed:8f:
                    a6:98:4f:a4:8e:35:e3:b4:08:61:32:15:a7:7f:1d:
                    d0:f3:84:2a:78:94:bd:1e:16:a0:92:17:50:4b:74:
                    c1:22:b8:af:44:32:f1:17:04:59:b8:03:8f:db:90:
                    89:3f:6c:9b:c3:63:7b:06:09:ee:df:3f:35:39:b8:
                    ad:6c:e4:7d:37:ef:dd:31:3b:37:c1:e9:c4:05:98:
                    ec:9e:7a:75:e5:60:81:eb:57:f1:ea:76:9c:db:d6:
                    e8:f8:36:4e:71:b0:a3:6a:6a:8b:4a:c9:63:e4:a5:
                    ff:11:d1:17:7e:99:60:fd:81:ee:d7:1a:6c:0f:f7:
                    b6:79:2b:0e:0f:89:03:d2:cd:c9:a8:34:0a:20:bd:
                    99:10:de:49:e6:b9:49:90:5c:36:73:f6:fa:d3:19:
                    3e:a3:ee:13:42:94:d0:af:f6:a6:ab:5b:78:d0:c9:
                    8e:04:f5:e0:10:ba:58:9c:da:b8:2e:32:76:1c:e8:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:BD:C9:8E:D3:41:79:61:EF:E7:84:6B:BA:D1:2C:3D:8D:79:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:69:56:4f:63:69:da:34:d2:95:c2:cd:02:b7:c6:2c:98:
         3b:86:ed:f7:10:63:86:5c:e9:8f:38:51:4f:56:d4:1e:30:89:
         c4:c4:b4:e5:a4:8e:9d:4e:4d:fb:9e:fc:d1:57:b4:ff:27:94:
         e4:60:0b:2f:b8:aa:07:4a:2b:e4:f2:87:9d:b3:4a:24:56:e5:
         7d:d6:f0:e2:3c:37:97:f1:84:c4:ec:ae:1f:1f:a6:d5:30:d2:
         e3:bc:cc:79:34:54:ab:b7:c4:a9:a1:a4:37:f4:59:19:33:7a:
         58:75:39:27:b7:3d:8a:13:f0:9f:e1:c8:1c:c8:4b:4f:d8:37:
         70:d8:83:71:70:5c:d4:75:8f:b7:45:ce:3e:b6:52:29:01:11:
         17:30:3a:d0:79:93:d7:85:35:53:61:45:94:b5:00:9d:c9:52:
         28:85:5b:75:4b:fe:10:86:de:9a:0b:4a:12:3c:3e:65:4f:3b:
         07:59:d7:02:b7:80:62:c7:6d:ac:32:1c:bb:76:a9:91:4b:3c:
         b6:a6:00:ae:ee:75:5a:f4:7c:58:34:d2:e2:96:8a:ce:8b:6c:
         7f:8d:0e:2f:1d:0e:e1:51:0e:cf:6d:bb:d5:ef:9f:2d:6b:0b:
         60:8c:81:66:fc:2d:35:a3:cf:95:c4:6c:24:07:f6:44:d7:5f:
         b7:3a:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:10 2025 by rpki-client