Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d397fda0-3457-3f2e-8df0-4c47df8e3547.roa
File:                     d397fda0-3457-3f2e-8df0-4c47df8e3547.roa (raw, json)
Hash identifier:          X810RboCWo2eTispFOzNKFLJGF1dg8b3pUqu/jFCaeA=
Subject key identifier:   38:0C:24:DE:E5:A4:B4:F2:79:3A:11:9E:CA:56:DE:FC:C7:6F:61:0D
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584838854E197994DC0152077C00
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d397fda0-3457-3f2e-8df0-4c47df8e3547.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     22822
IP address blocks:        206.223.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4e:19:79:94:dc:01:52:07:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=0eed25ac-0289-4efc-9e0e-a38ebc217668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ea:ef:e0:12:91:89:fe:00:a7:f3:1a:93:95:
                    68:d5:5b:56:d1:25:30:31:69:f1:fd:5c:d0:57:09:
                    85:7e:0f:c6:49:af:cd:bb:e4:95:a7:71:d5:7d:0f:
                    79:af:10:e4:83:b8:12:43:64:a1:76:c3:a3:af:27:
                    eb:41:30:4d:1b:8f:19:05:bd:71:6a:80:57:56:d7:
                    8f:93:ea:ff:bd:6f:56:bc:c4:e1:5a:1e:cc:81:ba:
                    0c:5b:ab:73:d2:96:a3:37:7b:24:99:ab:29:ba:ce:
                    36:5f:ac:7f:ff:b3:4e:fb:87:84:59:6c:14:f3:b6:
                    ae:56:c6:5e:12:dc:b7:76:aa:69:12:32:4a:0e:98:
                    cf:f8:41:43:81:28:38:55:d8:25:13:0d:a9:35:d9:
                    39:67:6b:de:d5:17:ab:9b:71:3e:c9:3c:e6:b1:ff:
                    8b:ea:24:0d:88:69:25:d5:c3:25:f0:28:72:32:22:
                    d2:a2:f3:53:8d:37:4a:79:8f:eb:86:bb:f2:be:44:
                    78:03:a3:71:77:fb:bb:9e:02:65:7f:c1:71:9d:78:
                    df:04:14:3c:21:af:86:86:94:1d:06:e8:68:93:db:
                    61:f6:d5:ff:c1:ab:04:aa:49:88:68:a4:67:96:44:
                    e9:73:31:4f:58:82:df:17:97:16:42:d8:69:f9:c8:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:24:DE:E5:A4:B4:F2:79:3A:11:9E:CA:56:DE:FC:C7:6F:61:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d397fda0-3457-3f2e-8df0-4c47df8e3547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:70:9d:3b:17:a0:af:2b:af:ef:59:c4:80:ff:a0:7f:c8:
         f0:d5:9d:fd:fe:d4:72:5e:42:1d:59:03:4e:b4:ee:0b:35:33:
         3d:69:35:f2:82:3d:68:8b:66:dc:45:a5:43:a1:04:0a:f5:c3:
         41:a0:59:97:8e:51:da:c2:58:a6:7e:71:f5:67:2d:69:8d:25:
         61:9e:90:54:83:73:86:c2:b8:f2:d2:42:51:e4:98:73:0b:33:
         41:59:52:bd:10:3b:35:b1:3f:29:e0:1c:e6:9c:d9:27:d5:cd:
         ae:92:cb:62:64:a9:07:e6:1e:a3:90:e5:54:ff:85:c6:44:60:
         81:8c:fd:98:13:bb:f4:b5:0b:ee:fd:98:b5:53:03:39:52:8c:
         ce:81:4e:f1:bb:87:37:ec:cb:aa:21:54:38:44:88:8f:76:5f:
         4a:7d:0a:4b:b1:7d:8f:c0:39:b2:ad:43:32:b1:50:5f:4d:38:
         a5:b4:12:cc:ed:ec:e2:80:0b:23:c0:1b:c7:94:6a:8d:8f:82:
         b3:e4:e6:33:95:27:21:a5:de:e1:cb:5d:35:e7:cd:d1:5b:3e:
         71:4f:e2:90:49:46:c9:17:b8:cd:92:89:db:0e:ae:e4:49:59:
         e3:19:a9:32:8c:63:dd:f8:b5:06:59:1a:74:08:a8:23:23:0b:
         94:27:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:14 2025 by rpki-client