Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/33d30594-c79d-3e30-9342-c5ecce805d47.roa
File:                     33d30594-c79d-3e30-9342-c5ecce805d47.roa (raw, json)
Hash identifier:          wwwMEGxUQ/O/tMPyohUkgYLc//SwhcyFp4z/d6bc9Ug=
Subject key identifier:   61:C8:60:90:2E:49:2E:8F:F5:9B:DF:29:C9:AF:88:33:FC:86:5F:5A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858487755D62B43B9CDAAA7AAD340
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/33d30594-c79d-3e30-9342-c5ecce805d47.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     62651
IP address blocks:        216.131.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d6:2b:43:b9:cd:aa:a7:aa:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=9cdeef29-c744-4ab2-84da-5288142c0925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:d3:9b:9f:2b:6d:af:59:18:44:1c:af:57:
                    b5:0f:45:5f:29:78:41:7c:2f:d4:38:9e:c6:d4:28:
                    20:7f:1e:f1:bb:e8:c8:60:ed:d2:d9:1a:43:51:e0:
                    b6:57:83:2d:12:cf:be:63:86:d2:ee:9d:a0:a5:44:
                    12:05:1f:09:2d:53:96:1e:7c:91:8e:fa:f1:79:f1:
                    f5:f3:00:00:9a:3f:1c:61:c8:d7:57:c0:04:c8:e0:
                    a4:c2:b2:79:cd:d1:43:64:4f:f7:ca:be:e3:5e:2f:
                    1d:d0:3e:aa:af:7b:50:c9:73:68:e6:ca:d0:87:16:
                    53:00:fa:51:28:e7:47:52:52:ea:89:be:b7:58:17:
                    93:e5:25:7d:d6:33:05:95:f0:2f:d6:f5:08:ac:4a:
                    a1:b9:92:35:47:20:43:76:35:b9:44:4c:1c:30:79:
                    fe:78:fd:0f:4f:45:69:63:5f:ec:b0:79:bb:4e:90:
                    d3:fc:ba:72:8d:a8:04:0f:d3:3b:a3:d2:e8:d0:37:
                    39:43:e1:52:0b:4d:29:35:70:60:d6:58:17:e0:b4:
                    aa:ec:e4:0d:9b:08:1d:62:55:78:aa:5b:5b:7b:94:
                    af:8f:2f:a7:92:4a:4c:e3:d5:b4:67:c2:a7:e3:ba:
                    b4:89:43:ab:62:33:e6:b4:8d:5b:19:8b:38:58:fa:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:60:90:2E:49:2E:8F:F5:9B:DF:29:C9:AF:88:33:FC:86:5F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/33d30594-c79d-3e30-9342-c5ecce805d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:8d:17:58:4b:74:3a:a6:b8:88:0f:77:a0:48:f2:f1:3a:
         60:64:30:8c:7d:28:10:ea:a1:04:da:e6:ea:9a:ff:14:5b:ed:
         e6:e1:fc:da:5c:e8:6e:8a:b7:d3:33:93:ae:f8:9f:ac:a6:b9:
         8c:7d:c6:ce:bf:7f:cf:08:b5:11:97:26:77:80:23:17:91:5d:
         39:dd:d0:6e:c4:4b:b3:7a:05:8d:72:60:eb:d8:9a:ca:4a:58:
         5d:60:cc:33:74:58:94:b7:8a:2d:c5:0b:45:5c:eb:91:0b:3e:
         cb:b5:99:22:84:1a:e8:48:c5:ae:c7:cb:19:97:54:4f:85:71:
         3e:7a:eb:95:bb:e2:8c:4e:3f:c9:1e:d2:a9:f0:cd:50:6f:03:
         9c:67:a6:4a:29:4e:9a:ad:ab:5c:a9:82:ca:59:30:ce:39:3c:
         46:1a:85:1f:75:da:fb:d3:52:25:37:2c:d9:d3:cf:ef:fa:46:
         35:f2:0b:9a:ae:ba:fd:1a:44:f8:26:aa:a0:4e:12:45:5c:7b:
         44:d7:33:06:09:99:66:82:93:8f:17:2a:36:37:bf:8e:99:e7:
         f9:1a:db:09:12:a6:2a:57:cf:38:1b:01:8d:1f:5b:7f:1d:21:
         06:af:53:da:77:26:65:9e:20:2d:74:3a:ff:62:66:d7:fc:27:
         47:1d:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:38 2025 by rpki-client