Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6cb7d383-6b6f-3397-b1fd-c9da20b7ef45.roa
File:                     6cb7d383-6b6f-3397-b1fd-c9da20b7ef45.roa (raw, json)
Hash identifier:          l883I1DCfBRn9QEdHHpT4SRvRc53y2aA1LhWtATcQCg=
Subject key identifier:   AE:B9:4A:80:CA:2D:C9:BC:7D:5A:2D:5A:A7:98:D5:EA:D6:25:80:FF
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABC11F8EEA1363BAADEC0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6cb7d383-6b6f-3397-b1fd-c9da20b7ef45.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     23059
IP address blocks:        208.111.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:11:f8:ee:a1:36:3b:aa:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=21488852-d341-470e-87ac-3a57ff8db8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:50:96:0f:ed:6f:e6:bc:3b:f5:89:ef:ff:
                    d8:17:ee:74:bc:7d:cd:ca:98:27:03:a4:d8:5f:be:
                    6d:9b:03:5f:07:02:22:95:d4:92:a3:65:97:0d:7a:
                    6a:ac:66:52:a6:81:48:fb:59:61:d3:a1:b5:55:fe:
                    d5:3e:cd:f6:97:d5:78:18:1d:2d:cb:63:be:e3:87:
                    4e:c2:50:a9:60:bf:99:29:59:c8:25:81:f5:71:5d:
                    4e:d1:38:1f:3c:ed:8e:49:0d:01:c6:15:ab:2d:62:
                    29:95:af:5b:d9:57:31:b0:fe:8b:b4:63:02:0d:90:
                    69:17:c7:3a:80:44:80:6b:92:95:44:57:d3:bd:23:
                    85:c5:06:65:57:67:09:1a:2b:81:9c:03:b9:6e:35:
                    e4:4b:26:8c:49:70:1d:36:35:19:f1:52:1c:26:69:
                    7d:65:54:5f:5e:16:2e:3b:c8:cd:1a:77:e7:4b:d7:
                    26:e4:cb:c0:ce:eb:ac:a1:1b:b4:1c:ea:24:ed:c5:
                    30:ad:72:40:4e:85:a7:14:5d:10:39:19:45:32:68:
                    08:2c:4a:22:65:39:55:10:e1:82:a4:b7:49:79:fb:
                    06:1c:38:62:7a:6b:47:a6:f8:fa:f3:72:a6:95:2a:
                    4e:a7:cb:33:d9:de:cd:a6:27:a5:05:52:06:b5:08:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:4A:80:CA:2D:C9:BC:7D:5A:2D:5A:A7:98:D5:EA:D6:25:80:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6cb7d383-6b6f-3397-b1fd-c9da20b7ef45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:3a:f6:ac:af:16:50:7f:c2:70:86:75:37:bf:b4:f9:45:
         1f:6b:b3:6f:87:16:c2:26:34:ca:9b:db:26:f7:ff:05:11:24:
         14:d5:8e:45:b3:f8:1d:37:ab:1b:bb:83:b3:58:68:a2:00:8b:
         f8:1a:e7:a9:cc:3f:2b:90:17:28:20:f1:c0:44:60:26:2a:10:
         2e:ca:9c:00:de:b6:db:74:03:22:25:bb:3d:3b:31:3e:46:1e:
         e8:2d:33:96:0f:a6:44:2d:ab:24:7b:26:7f:7f:54:e7:e8:6b:
         c5:a8:40:4a:94:69:13:25:06:23:a0:23:55:2d:38:94:4d:4d:
         e6:1e:66:68:35:53:ff:2d:d2:8a:09:14:9b:f2:8a:4e:3d:39:
         13:19:69:b6:d0:90:79:25:b3:49:cd:04:ca:6c:ea:1f:bf:af:
         17:ff:a9:3e:cd:c0:11:36:60:ed:5d:66:3e:33:ac:25:50:33:
         24:cd:a7:54:1f:2f:ff:a2:e9:ed:27:d2:33:eb:66:f1:76:96:
         a0:d1:3a:30:c0:d7:75:04:ff:e8:8a:c1:1e:f6:37:77:53:90:
         ee:38:33:6d:57:0b:86:ab:b8:2d:13:7f:aa:d2:f8:8d:e1:ac:
         f3:e8:5b:6d:fa:a2:2e:74:a5:7f:df:89:44:78:90:e7:12:90:
         da:a0:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:26 2025 by rpki-client