Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
File:                     c6373672-771d-3946-baf4-d4e76c94aaf4.roa (raw, json)
Hash identifier:          MX0GKNRwObF5Vmkp8kBN1FOM0pwWuJXiAXtd8qJ7hvg=
Subject key identifier:   DA:6F:D9:93:F8:6C:B6:37:8F:0A:B4:61:E6:CE:64:53:95:67:EF:FD
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858483E1AAA6F67B27EEC354BEE24
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        216.21.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:aa:6f:67:b2:7e:ec:35:4b:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=f5a3f080-c931-46c5-bb6c-a3958efddca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:1c:59:1e:25:64:4c:8c:9b:98:fb:ca:e1:
                    e4:cb:51:a0:00:21:1b:65:d3:58:f8:5b:97:6e:da:
                    d6:1e:05:07:d4:b6:41:0f:8c:8f:ba:17:0e:d6:5a:
                    67:c9:df:20:ba:b8:2b:06:a2:e5:b3:72:b6:c4:f0:
                    81:bf:11:3b:bf:bb:fd:28:9e:c0:4c:f9:0e:ed:e7:
                    16:fa:69:e8:1e:12:b2:95:a1:7d:8f:ae:90:b3:64:
                    31:19:91:46:f3:18:93:1f:90:d2:c7:c3:e5:2b:b5:
                    b0:e3:94:3f:f9:09:a6:43:21:c2:ec:b3:21:2b:e0:
                    5a:be:18:c1:6e:8c:1b:5a:62:74:a5:10:da:d8:49:
                    c9:0e:fc:b2:12:29:e6:f2:ff:00:32:15:d4:d3:26:
                    50:81:9e:3d:6b:2b:66:e4:32:57:35:3b:91:d0:c5:
                    b9:1b:8e:cb:85:28:5c:c1:21:d1:bf:96:ff:69:de:
                    02:de:c4:56:12:72:9b:35:96:4f:c7:87:25:3d:99:
                    25:b0:75:c6:ed:1e:92:7d:b3:1e:82:10:96:a5:47:
                    36:82:57:da:94:fd:e2:08:3e:84:c7:63:77:c9:9d:
                    4d:74:38:8c:c8:b3:eb:fc:37:1c:05:a9:dc:29:e1:
                    de:01:e0:5a:50:96:3a:8d:14:ff:b6:5a:e8:6c:4e:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:D9:93:F8:6C:B6:37:8F:0A:B4:61:E6:CE:64:53:95:67:EF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:fe:85:fc:2c:c5:42:bc:15:0e:be:c5:11:d7:24:2a:95:
         75:92:74:22:1c:90:48:98:15:2c:da:fe:ce:c4:e3:71:b0:8e:
         81:5d:21:14:6d:50:7b:4a:9b:8b:b2:bc:b7:af:78:99:b1:8b:
         e7:f8:4d:da:f8:c4:b0:63:b8:77:fb:19:2d:69:b8:95:ea:30:
         a5:82:9d:38:23:d3:9c:e2:a6:92:9d:72:88:89:43:b0:fc:a7:
         55:73:c5:e8:a2:e0:5b:85:55:96:c8:47:7b:ce:62:2c:21:f6:
         ea:63:40:b5:ad:a8:1d:b7:75:7c:b5:da:c1:df:20:60:d4:c6:
         65:51:70:40:f2:b0:0a:d7:f9:98:c5:4f:44:fd:19:e9:0c:c8:
         63:af:1f:10:9d:d9:df:8d:57:7c:f2:bb:a1:eb:a5:1b:c7:0e:
         69:35:d6:25:15:a6:72:20:fe:b6:d0:35:29:39:16:ae:9e:74:
         ff:c9:cf:00:54:00:90:8e:e9:cf:91:fb:3d:7c:df:22:dc:42:
         33:1a:fb:b0:8c:b8:42:61:1e:c3:59:8f:7b:65:3a:cb:92:e8:
         9f:38:8c:c9:c6:99:3a:c3:a8:6b:2a:8d:bd:05:23:61:39:7e:
         9f:0e:5b:26:23:fd:9a:89:9b:b5:77:fd:f0:5d:b5:77:b9:46:
         4e:44:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:20:51 2025 by rpki-client