Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa
File:                     d3d52428-3366-3940-ba48-6c79fec227e0.roa (raw, json)
Hash identifier:          3H4O5JeYm/BjINa6B5+uerZr4sSYb68OTnk6TXvXCbc=
Subject key identifier:   64:D9:E0:F3:AB:AD:02:E8:BF:36:7D:13:56:09:97:B1:A7:5E:72:15
Certificate issuer:       /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e
Certificate serial:       010D0C9F4328584863CB06CC5C40C02B04EAFB30
Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     11736
IP address blocks:        206.209.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:06:cc:5c:40:c0:2b:04:ea:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=34dac3bc-0140-48b1-8b57-6230e109ea8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:c1:7e:56:2d:7e:aa:58:85:d3:e7:8f:ff:
                    3c:40:3e:17:b3:d2:08:04:59:d4:36:40:c4:ae:76:
                    95:2a:93:8e:47:be:d8:5e:9f:52:b6:da:a5:54:cd:
                    ec:bf:da:89:b3:95:d7:da:9c:c5:30:90:d2:c8:7f:
                    1c:aa:5b:d4:66:27:86:50:3c:15:1a:53:f9:64:b9:
                    28:5c:57:3d:99:93:2b:f0:72:05:b9:89:ce:62:79:
                    ae:da:fe:0c:d5:a0:43:9d:8d:72:a3:13:0c:b7:9d:
                    32:13:45:e0:95:b8:10:fc:76:92:23:a0:24:00:7a:
                    03:f2:81:ee:8b:c3:03:32:b9:cb:d6:83:60:fa:f0:
                    98:a3:58:40:de:fa:6c:e2:23:ea:70:b1:cf:cd:84:
                    88:ef:79:65:73:22:23:c8:6a:fb:94:d7:95:98:33:
                    12:68:4e:3d:35:61:0e:55:ef:51:1f:59:33:48:0c:
                    38:13:4a:f9:62:d9:0b:42:b6:cb:bb:03:44:5c:0f:
                    27:94:b8:2f:57:df:07:9f:d1:6a:5b:3f:76:db:d6:
                    ea:7f:cb:a7:e1:f2:ad:8a:41:5c:ba:3c:1c:07:aa:
                    66:6c:c9:ca:ab:3b:ae:58:ea:3c:0b:2f:05:66:d9:
                    d6:b7:ee:1e:33:8b:7b:fa:55:b6:f2:78:88:9d:24:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:E0:F3:AB:AD:02:E8:BF:36:7D:13:56:09:97:B1:A7:5E:72:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl

            X509v3 Authority Key Identifier:
                keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:33:b2:ae:7c:81:8c:55:e8:8d:fb:7b:4f:af:cc:61:01:5e:
         49:e9:1f:78:51:7e:3e:ae:b2:1c:5a:31:a3:52:af:32:5d:9b:
         df:12:b5:07:40:56:6b:71:2c:a3:ac:d2:e3:92:f0:2f:d7:b5:
         4d:88:32:47:37:92:71:57:0e:7b:86:c9:9d:7a:86:fe:c8:f9:
         06:e6:83:39:16:8c:94:1a:c0:30:42:a8:7c:f4:b5:67:2b:f6:
         90:2f:fd:ae:6b:13:b2:d7:58:89:a2:67:2d:72:94:0b:b2:11:
         50:af:b5:86:e9:d2:e5:bd:d6:63:dd:1f:8b:bf:4d:ee:8a:eb:
         7d:02:d9:57:0b:3c:c7:c3:27:6b:2a:1b:42:a8:1d:4a:a7:01:
         c0:cc:76:1f:6f:d1:63:79:af:d1:79:b1:e9:2a:49:62:ce:2b:
         45:16:a4:36:5f:b9:b9:72:8b:15:05:89:b1:9f:1f:a4:a8:0e:
         d3:20:db:84:85:47:de:ea:c4:e2:e8:0c:c8:2d:0c:75:53:26:
         ec:17:0a:b8:a1:ab:d5:c0:61:63:d2:46:78:4a:c4:f2:02:e5:
         c6:f3:2f:59:31:f2:9e:f6:12:8d:cb:59:4e:5a:c6:fe:16:c2:
         64:8d:88:ff:c2:74:00:a9:f4:4d:2e:8c:05:f5:75:9f:dd:5e:
         88:9a:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:33:09 2025 by rpki-client