Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa
File:                     7349fb17-24d7-3b46-9c87-43a461d41c0b.roa (raw, json)
Hash identifier:          rbTQSIc7W8IIIZVD3D7RMoEh5ptg0CuZ3PRgzDTfO1k=
Subject key identifier:   45:17:E4:1C:89:24:17:73:8C:86:E6:20:EC:A0:E1:55:D0:7A:AE:7E
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858483E1AAA5C793135F3930C1580
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     54225
IP address blocks:        216.21.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:aa:5c:79:31:35:f3:93:0c:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=faa93202-aa19-4b3e-96fa-1cc72bd0e365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:7f:7b:bb:bc:be:88:c1:d7:37:1a:10:0e:
                    42:3f:96:cf:a0:6d:b7:e0:7c:fb:be:6a:0f:10:62:
                    50:9e:7c:ba:bc:00:a7:5a:93:8c:d2:79:68:57:60:
                    f5:6d:f1:50:9b:42:61:59:d7:3e:d2:5e:1d:16:21:
                    9b:c6:1d:3f:15:8c:50:8f:9d:64:fe:07:cf:f0:c8:
                    c7:69:60:b7:11:ff:02:84:6f:37:96:a8:fc:74:a3:
                    a4:e6:1e:0f:b9:db:e9:e2:f8:d0:00:3e:e0:bd:db:
                    27:2e:5f:3a:60:cc:dc:26:81:2c:7d:2e:22:da:10:
                    86:34:14:ee:11:f8:41:39:d2:f7:91:58:38:3e:f8:
                    bc:26:3e:42:a2:fb:52:98:9d:ed:af:2d:1b:0f:68:
                    a1:0e:4a:e2:eb:98:5d:33:c9:45:a8:15:f3:72:0b:
                    b7:7b:2a:7b:6f:01:c6:56:ab:e1:ed:ac:7a:c0:7d:
                    e3:0b:cb:62:b9:a5:15:fe:78:6e:f1:c6:9d:ab:47:
                    71:94:28:e7:0e:de:8b:db:24:7d:15:c3:d5:78:b0:
                    86:68:4c:b6:36:16:d4:6a:16:20:e1:f7:c5:21:86:
                    04:23:28:e2:0e:72:33:0b:26:90:33:6b:02:37:59:
                    99:3c:10:f8:6e:5d:24:d8:d7:63:97:66:df:96:77:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:E4:1C:89:24:17:73:8C:86:E6:20:EC:A0:E1:55:D0:7A:AE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:50:55:10:b0:71:3d:cd:a5:e1:e6:df:5d:0c:f1:be:0a:
         f9:e1:e8:3c:7b:12:23:ec:d5:2e:e3:ff:67:e0:df:8d:40:16:
         b4:a7:ab:88:43:3c:b0:18:64:a8:8c:9f:1d:7d:86:38:71:de:
         43:3b:f6:c8:2c:06:1a:e0:5a:ac:3d:42:a9:dd:fa:25:2c:68:
         8f:22:ee:75:6e:74:56:d2:9d:b4:c7:55:4b:69:f8:b6:53:e6:
         8d:e4:68:3f:a3:fa:d3:37:8b:a2:51:ee:8b:85:3e:37:4b:39:
         e1:c5:b0:30:35:6f:cc:0d:fd:76:01:5c:87:24:35:f5:aa:00:
         6f:93:e6:93:d0:db:30:49:80:04:dc:19:e6:b5:3c:41:d3:bb:
         7b:ae:59:e8:f5:9e:d8:00:1d:b3:71:39:8b:81:4e:26:c0:19:
         d6:e5:56:1d:df:e4:8a:cd:6d:97:d8:e4:b4:26:64:3e:1b:32:
         c4:79:dc:73:d7:99:3a:65:51:0b:19:7f:c4:66:4a:a4:9d:ab:
         ac:93:05:5c:64:e1:52:89:a2:85:40:f5:77:51:ac:8f:7c:11:
         c3:da:3c:98:8f:c1:1b:17:7e:3c:ce:ea:d5:d1:c2:79:58:56:
         ed:c1:18:a8:ff:2d:da:7b:16:c7:a4:e5:df:a6:c5:0d:dd:14:
         31:88:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:03 2025 by rpki-client