Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/61cb628d-14a6-34a1-969a-71482df9a6c0.roa
File:                     61cb628d-14a6-34a1-969a-71482df9a6c0.roa (raw, json)
Hash identifier:          AqN8O98e8BHSFjA/gQjwCKv7s4XRg04Y3a+E6vbGXs4=
Subject key identifier:   BC:F4:18:91:11:7E:F0:BA:13:5F:A4:B6:EC:46:92:C1:69:FD:E5:CD
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABC2FC6FCEDF5E4E4D4A0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/61cb628d-14a6-34a1-969a-71482df9a6c0.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     38622
IP address blocks:        208.111.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:2f:c6:fc:ed:f5:e4:e4:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=66405eb5-4ce3-45fb-b7f0-0a2d3be21787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:60:49:1f:65:fd:40:20:c1:dc:ac:b1:6a:
                    86:05:93:ad:9d:70:bb:4c:5c:fa:ba:fc:ff:b9:e3:
                    b3:5b:06:d8:54:ec:e7:f7:b0:bd:16:00:da:e9:02:
                    ee:0d:bc:fb:75:75:2a:2d:4d:74:ab:d5:a0:af:a1:
                    6a:fb:64:9c:9a:eb:3d:ff:f7:2b:c1:33:7f:af:66:
                    76:ad:46:e1:93:63:91:a7:2e:4e:9b:2b:3d:85:90:
                    1b:b5:55:6c:bf:6d:2c:8a:60:b7:b0:45:47:dc:c9:
                    86:56:d9:e2:25:6a:52:63:de:65:49:63:42:c8:b0:
                    6a:2d:d5:c1:b1:84:cb:92:82:c6:f1:f2:92:44:27:
                    6b:be:db:45:7d:ca:1a:0f:4e:d3:8b:d3:9c:3d:0c:
                    c9:e3:f0:fc:f6:d2:d3:f2:5b:4b:43:d5:e2:9a:13:
                    a6:25:15:94:cc:ad:09:fa:94:c2:3c:36:0c:a8:70:
                    a3:d0:83:7c:6d:a0:06:80:66:61:a8:71:1f:80:1b:
                    10:72:f0:21:2b:7b:04:fa:5d:dd:5d:5f:78:6c:a4:
                    33:ff:90:a6:80:ee:33:0b:dc:a9:2e:bd:1f:c5:75:
                    27:51:10:d8:3f:2e:96:e6:93:79:be:34:61:8b:0e:
                    41:3c:53:94:6a:8a:7c:64:c4:5c:7d:b2:28:b5:74:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:18:91:11:7E:F0:BA:13:5F:A4:B6:EC:46:92:C1:69:FD:E5:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/61cb628d-14a6-34a1-969a-71482df9a6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:18:f3:a6:a6:fb:fc:28:a2:f0:fe:be:db:16:2c:ac:29:
         7d:14:b3:6e:48:f3:f7:4d:b6:cb:f0:34:2f:bd:cf:51:1d:65:
         74:b1:d4:10:3a:7c:8b:fb:4e:b5:eb:d8:db:ca:2f:4c:0c:19:
         e0:94:4b:c1:10:27:06:26:f3:a3:c7:c9:88:7f:90:a6:2c:22:
         28:29:90:0b:ec:8e:eb:53:b2:90:da:ca:af:8c:d0:32:5d:de:
         3f:12:e5:40:08:de:d3:d1:c9:0a:40:e0:bd:ce:a2:ea:f0:ed:
         81:1e:2a:c3:65:41:03:8c:29:a2:bc:e3:06:2d:25:fb:4f:22:
         3d:c7:fb:b3:a9:15:1f:75:8e:d1:f7:d3:fd:b2:92:fc:03:77:
         2e:79:be:73:fd:6e:ab:50:1b:30:ac:f2:4c:be:5d:94:92:13:
         de:e4:ca:c1:09:18:85:d0:05:c9:b5:91:29:8b:ae:12:38:05:
         1d:e6:6c:f8:06:99:d8:99:8e:b7:7c:5b:09:03:24:75:d6:2d:
         60:30:8a:bd:f6:d9:d9:bc:64:38:66:ec:0e:e3:74:f2:83:69:
         94:d6:dc:64:df:4b:f9:67:a1:8b:5f:5b:e5:49:c5:60:bd:2b:
         7d:c3:29:6b:1c:07:b7:45:42:b2:bb:a0:c5:5e:5f:53:16:d7:
         e8:45:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:55 2025 by rpki-client