Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
File:                     edc4d5df-d459-3a48-842a-38fdbe6d709e.roa (raw, json)
Hash identifier:          2Kp6aRJYbSNvAo5G4Rxn2AnU2Ot+HR7Iw4/QJXGEbJI=
Subject key identifier:   F1:D9:2C:D7:C3:CF:C2:1C:51:39:49:C5:E2:52:CE:E1:B3:19:E3:86
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584851A573F737EF9AFB2D20F680
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     46261
IP address blocks:        216.158.192.0/24 maxlen: 24
                          216.158.194.0/24 maxlen: 24
                          216.158.195.0/24 maxlen: 24
                          216.158.196.0/24 maxlen: 24
                          216.158.197.0/24 maxlen: 24
                          216.158.199.0/24 maxlen: 24
                          216.158.200.0/24 maxlen: 24
                          216.158.201.0/24 maxlen: 24
                          216.158.202.0/24 maxlen: 24
                          216.158.203.0/24 maxlen: 24
                          216.158.204.0/24 maxlen: 24
                          216.158.206.0/24 maxlen: 24
                          216.158.208.0/24 maxlen: 24
                          216.158.209.0/24 maxlen: 24
                          216.158.212.0/24 maxlen: 24
                          216.158.213.0/24 maxlen: 24
                          216.158.216.0/24 maxlen: 24
                          216.158.217.0/24 maxlen: 24
                          216.158.218.0/24 maxlen: 24
                          216.158.221.0/24 maxlen: 24
                          216.158.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:73:f7:37:ef:9a:fb:2d:20:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=5a67ff30-2bec-42d6-8b46-508036f15f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:fe:d5:59:d4:d9:4c:33:fd:95:59:97:0e:
                    62:09:74:c9:e6:fb:da:10:78:a3:ae:3d:a6:49:dd:
                    5f:2d:0d:26:fb:06:86:77:c9:30:9a:73:35:3c:d2:
                    74:11:26:db:73:81:2e:a9:33:15:46:c6:d7:cc:3e:
                    bb:bf:91:3c:4e:d1:25:c4:29:d6:b2:95:ad:9e:56:
                    32:48:ed:f6:c3:3f:ac:19:d2:05:81:49:2b:ae:0f:
                    6a:ee:59:0d:5c:7f:e2:27:37:ae:f1:74:3b:88:cb:
                    8f:fa:29:05:39:6e:7b:04:4f:74:fb:6a:71:14:af:
                    a0:87:47:1d:85:98:b4:f9:dc:74:b4:c9:4d:5d:59:
                    76:48:1e:cc:12:7e:c0:8b:58:1a:58:96:fc:ce:4f:
                    17:20:e5:21:09:5e:25:2e:a9:94:4f:96:ff:7b:7c:
                    10:5f:74:ba:5c:81:06:68:98:d0:94:f0:bd:79:16:
                    0a:f4:f2:d8:95:20:67:60:5c:4a:d0:ad:d7:89:48:
                    61:1f:f2:d2:bd:1f:07:7e:14:85:5b:56:6a:02:8b:
                    a5:42:84:03:ff:30:14:09:6a:b8:b6:1a:3d:72:fb:
                    69:91:cf:93:fb:0c:01:f5:1d:79:c0:4e:f3:85:dd:
                    cd:6d:11:f4:4f:93:1f:e4:e1:e1:a4:d9:3a:5a:bf:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D9:2C:D7:C3:CF:C2:1C:51:39:49:C5:E2:52:CE:E1:B3:19:E3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.192.0/24
                  216.158.194.0-216.158.197.255
                  216.158.199.0-216.158.204.255
                  216.158.206.0/24
                  216.158.208.0/23
                  216.158.212.0/23
                  216.158.216.0-216.158.218.255
                  216.158.221.0-216.158.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:f3:68:84:00:a8:36:1f:f2:4a:f7:ff:95:c0:f7:9a:61:
         c6:d7:ef:64:67:08:fa:21:1f:7b:0e:31:3e:d4:f8:d8:28:bb:
         80:2d:81:c6:90:76:74:9f:fc:1c:72:ae:a1:6f:78:0f:dd:62:
         ee:ad:89:20:85:91:02:03:cf:c0:9c:d5:b0:2b:80:cc:be:b9:
         b3:a5:e1:7c:7e:2c:e6:58:88:d6:75:1e:d6:cb:f4:3a:60:f5:
         9e:80:96:b1:86:d1:99:e6:d6:7a:91:33:18:56:11:b3:11:6d:
         cb:88:95:ce:c6:26:32:a0:0c:18:e9:45:ae:4a:8b:62:1e:59:
         33:39:c3:8f:ce:c8:56:85:a7:b6:18:37:9b:de:b3:f7:7f:d2:
         dd:de:5d:2b:67:f6:34:a8:68:28:7c:28:13:50:5c:63:9e:c5:
         2c:75:bc:55:0d:4c:fa:5c:dc:62:5b:a4:e1:d7:ba:05:2a:81:
         62:ca:99:f7:48:69:d3:e3:55:c8:dc:d1:1f:f5:94:b8:80:98:
         37:81:d6:48:c8:a8:89:c9:fa:79:88:54:95:ef:87:bc:57:13:
         50:89:51:2c:57:5e:42:5b:47:99:af:33:52:db:dd:0b:dd:74:
         c1:a4:18:62:5b:1c:a7:ac:7c:37:27:2b:ff:e9:76:4e:e4:92:
         f6:a4:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:10:43 2025 by rpki-client