Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa
File:                     f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa (raw, json)
Hash identifier:          WLUGaZfq4oJjl8ripVj+UlSu3/R8wC6cuaqN2nR9jhQ=
Subject key identifier:   CA:23:B4:67:9A:54:34:B0:E8:24:12:C9:1D:7E:10:C2:62:5B:3D:66
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F43285848021509D17F15A6437FE88BE0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     33211
IP address blocks:        206.41.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:09:d1:7f:15:a6:43:7f:e8:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=71f54088-55cb-45fc-b883-bd0ceae6f5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:cd:c5:6c:7f:53:b6:b9:d3:62:c3:18:21:
                    b9:a8:6f:9b:a1:84:4f:49:69:07:6b:16:b3:3e:08:
                    bc:09:f2:96:b7:a3:f1:de:94:ca:a9:51:74:ad:76:
                    cf:c2:10:01:c0:36:5e:f1:e7:73:07:cb:60:25:65:
                    5c:62:de:95:fa:34:0b:f5:4b:65:2b:1a:5e:f2:e5:
                    5f:92:05:f8:27:14:2c:ef:eb:f9:0d:2e:31:09:4d:
                    34:ca:a9:71:ee:59:28:00:72:47:b5:29:90:e0:92:
                    90:6a:18:00:7f:61:40:02:da:6a:72:c2:2e:75:68:
                    e7:7a:6f:0f:dd:42:83:88:bd:e4:00:8d:a6:61:c0:
                    1e:b2:9e:7b:40:1d:00:85:21:7e:c4:4d:63:65:f2:
                    3f:ab:f0:35:ac:5f:51:15:5e:53:7a:d5:2f:e6:81:
                    df:59:fb:01:04:6f:6a:31:83:01:c7:3d:ac:0d:3a:
                    b9:15:68:85:92:0d:df:47:be:f0:16:08:72:95:d6:
                    8e:b7:ad:40:14:a4:65:d9:25:97:b8:e2:20:6f:06:
                    dc:c4:a6:eb:16:fd:96:7a:72:94:4c:7f:57:4f:b1:
                    b5:e0:a0:94:3a:be:dc:25:0e:c4:69:52:65:0a:01:
                    ac:9d:ed:eb:54:f9:99:57:a6:32:e5:ee:bb:eb:f4:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:23:B4:67:9A:54:34:B0:E8:24:12:C9:1D:7E:10:C2:62:5B:3D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:20:f3:74:28:dc:82:b7:10:db:26:7b:91:4b:6f:e0:0c:
         51:fc:5f:d3:bb:47:67:ee:7c:76:6a:64:81:26:2d:d8:5d:d8:
         27:5b:19:bc:cc:c5:8f:e2:4c:cf:1e:e3:20:9b:01:dc:45:f9:
         ef:ed:34:94:62:4e:30:c4:f9:71:c3:0c:ed:68:3c:1b:b9:c7:
         65:40:cd:15:77:fe:a7:9f:b2:02:a2:91:3f:a7:42:13:09:ed:
         76:4b:17:7b:e5:c9:b1:9a:73:4b:e6:3c:e2:d5:a4:92:6c:ff:
         7a:da:b5:d0:dc:14:05:aa:e2:86:80:fc:07:24:48:6b:92:d9:
         ff:5e:97:48:c7:07:2b:61:85:ad:33:3b:b7:c7:2a:c5:96:09:
         0c:36:a6:0f:7b:ec:09:f6:c0:17:bc:18:58:9b:67:17:31:e6:
         69:54:ca:1b:41:94:6b:4d:65:1d:e3:59:7d:52:68:2a:b3:8a:
         7b:2e:cb:44:f2:ee:37:40:ea:0a:ee:15:b1:47:e1:0b:06:29:
         8c:f8:b9:44:85:8f:af:fb:02:13:52:ad:c5:98:f6:9e:05:16:
         c0:af:10:08:ce:05:bc:e7:20:c5:80:52:02:13:81:70:0f:65:
         2d:24:ca:64:63:1a:46:3f:81:dc:05:3b:07:11:a2:b2:82:52:
         20:9a:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:28 2025 by rpki-client