Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa
File:                     826c9b32-80a3-3d5e-b64c-775640089e22.roa (raw, json)
Hash identifier:          KXYDMz80WRKKcn2WdyqcXrALqF/a6rLJHaW4IYX9Mfc=
Subject key identifier:   39:48:79:FA:C7:F6:83:A3:0F:70:AF:42:D8:30:31:E3:FE:76:2F:2B
Certificate issuer:       /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b
Certificate serial:       010D0C9F43285848424AD3D7BFF108F02CCB5980
Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     21976
IP address blocks:        207.200.170.0/24 maxlen: 24
                          207.200.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d3:d7:bf:f1:08:f0:2c:cb:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=ca040d95-42d4-44b1-b010-295941b6721d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:9e:52:0e:d4:3a:37:72:f1:db:fe:c8:02:
                    45:c4:42:0b:71:8d:35:5d:c9:f3:21:d5:32:47:27:
                    cc:8f:ac:0c:91:c7:76:ee:f5:ed:d9:12:08:75:6c:
                    81:ad:a6:6c:a6:44:3c:c5:bf:32:58:80:d5:7b:bc:
                    6f:b8:3b:ed:1e:21:6d:7c:d4:0b:23:0e:43:77:cb:
                    21:1c:cd:29:7d:54:68:42:72:67:d0:2a:a9:39:24:
                    71:ae:a6:b1:d9:e9:54:d5:a3:ca:6f:ef:f6:b7:62:
                    dd:b5:cc:fb:3b:e9:00:44:32:71:75:37:92:1d:a6:
                    b0:15:7e:1b:31:39:d5:53:4d:a7:6a:20:a0:d5:2e:
                    56:91:a4:4d:d1:85:5e:ea:ee:79:70:86:37:3b:fb:
                    f6:5c:fe:17:d2:0c:89:48:ae:c1:b9:dc:39:31:9a:
                    6c:57:7c:8c:81:c4:db:aa:54:34:8e:f6:bc:4e:14:
                    16:c9:8f:b5:e1:49:2f:a5:0d:c1:39:89:42:58:1c:
                    c8:58:31:8a:fc:2e:00:40:48:a4:e3:83:ef:3e:ca:
                    b9:0f:56:e9:bf:8f:75:33:f8:3d:c1:c5:46:a4:c5:
                    82:7e:5e:1e:74:fa:f7:ca:20:33:f6:32:40:ff:68:
                    cd:21:d4:0d:27:93:48:36:20:1d:ae:5d:f7:c9:67:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:48:79:FA:C7:F6:83:A3:0F:70:AF:42:D8:30:31:E3:FE:76:2F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.200.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:c0:f0:73:e2:b9:d8:f2:78:a3:59:d3:cc:80:58:f8:56:
         93:16:48:5f:db:c2:16:d5:4d:16:57:22:97:02:99:24:81:fc:
         69:47:06:24:28:49:b8:11:e6:9f:a7:04:49:2f:13:58:26:05:
         8b:0c:9b:45:18:16:b4:32:d5:9f:2b:02:be:b4:ff:d0:f9:d7:
         ee:cb:e8:5c:2b:c6:40:11:90:98:e0:f4:ed:6d:fe:86:72:ed:
         47:98:58:6d:94:d0:38:ea:0d:04:02:6b:fd:44:73:6f:8a:7d:
         fa:b3:f8:f2:e3:4d:01:c1:a9:32:aa:3b:61:6e:cd:99:c1:1e:
         80:1e:b5:67:14:ce:cf:be:f0:c7:ce:ae:b1:05:aa:90:a8:a2:
         96:60:2d:ad:2c:fc:d4:01:d3:24:c7:c5:b1:74:8a:f5:dd:cf:
         86:a7:24:f6:be:2a:b8:0c:8e:d0:00:b3:57:e8:c4:16:44:95:
         95:e4:95:0f:d8:e1:17:b8:bb:0c:71:2f:57:75:d8:08:61:e4:
         31:99:af:fc:67:23:96:ad:20:fd:d4:3f:27:8f:12:3a:da:27:
         f8:76:ef:c8:d7:a7:11:91:7d:18:70:e8:8a:48:a6:12:da:a9:
         0b:23:f0:11:1c:38:58:24:c4:8e:d7:b2:69:da:b2:ba:cb:e9:
         cc:cd:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:11:51 2025 by rpki-client