Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa
File:                     3c51508c-e229-3495-972e-46feecd4c139.roa (raw, json)
Hash identifier:          q0w21LLOKsUhPPFrB1d0dhP3HwfVNfKoV92ZZMVWVA4=
Subject key identifier:   87:CB:61:AE:D6:C8:AD:6D:8F:03:25:6E:54:96:C8:5C:B0:B4:2A:56
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584824FA8F9522F092F0FD6D7D80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     13536
IP address blocks:        216.114.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:8f:95:22:f0:92:f0:fd:6d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=d44d81cb-0241-4c12-82db-f421bd515385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:c2:3f:5f:4d:08:92:77:10:6f:21:a5:1f:
                    9c:1a:3c:29:32:78:9b:3f:a4:b4:e8:06:14:b0:47:
                    5d:ef:49:0e:08:26:d8:d3:33:14:60:37:1b:8a:e9:
                    da:19:ed:26:5f:9f:16:bb:11:f0:d5:26:38:bd:88:
                    e3:77:0c:58:d0:19:ac:43:ff:44:ae:a4:c3:01:41:
                    d3:9f:ae:14:8f:db:4f:13:05:9f:d1:71:bf:f0:56:
                    27:44:57:e8:df:8e:85:a2:55:02:e3:e8:e5:11:02:
                    b2:4a:24:bb:83:f9:1c:25:67:47:80:be:8f:ab:18:
                    bc:47:c5:eb:4d:1e:8e:7f:2b:52:34:aa:bd:35:f9:
                    2f:b7:86:13:d3:4c:4e:b3:d9:3f:a2:ca:4b:a5:29:
                    a7:fd:c5:df:4c:8b:f6:87:be:38:59:dc:5c:76:73:
                    08:17:c5:3b:1b:04:85:65:a6:e9:8d:1b:ef:ec:1f:
                    85:dc:f6:e3:64:88:75:de:25:e6:2c:45:94:4e:83:
                    e0:15:2c:30:99:8f:1b:31:59:7f:0b:5c:e9:41:d7:
                    0a:37:f4:e4:ed:b9:2f:52:61:6b:03:a3:cb:42:e3:
                    52:95:9f:da:b3:63:44:f4:db:1f:41:7f:75:a1:92:
                    5c:b1:a3:03:74:f0:71:0e:a9:44:b1:d3:07:5f:e2:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CB:61:AE:D6:C8:AD:6D:8F:03:25:6E:54:96:C8:5C:B0:B4:2A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:df:9e:49:cd:a5:d5:08:3b:40:1b:3a:b2:ba:8e:c8:7e:05:
         8b:4c:a1:95:99:4e:a7:90:a1:67:c3:46:3c:a7:53:60:8b:5a:
         c5:44:79:06:42:8d:a4:99:54:58:04:eb:c2:ac:ef:c7:c5:db:
         d7:91:10:b8:2b:3e:9f:84:ed:24:5a:81:2e:5b:19:b9:9f:01:
         3a:60:98:4e:23:fe:94:fe:76:84:36:61:b3:04:56:7b:6c:0b:
         e5:56:59:c0:83:fc:cf:30:80:49:b5:70:6f:37:22:54:b5:1e:
         f9:56:f8:93:de:a6:ab:d2:1c:ac:1a:70:fd:66:0d:23:48:b6:
         76:08:61:0d:62:d0:c9:ef:f5:1e:74:5b:b9:97:13:34:25:70:
         a4:45:3e:58:10:29:7b:20:a3:49:f8:13:92:06:75:10:2c:4e:
         eb:41:48:b5:a3:1d:5f:ef:49:32:d4:ff:49:c5:98:22:61:bd:
         45:b1:1f:2c:ef:31:01:37:8f:17:30:75:b6:8a:8a:26:86:a0:
         fb:9e:f0:bc:ea:7e:08:2f:a8:86:97:c6:47:b3:f2:64:d2:a1:
         33:a5:ab:71:9f:87:e8:a8:d4:43:f6:b0:1e:eb:9f:a5:80:0c:
         bd:61:54:32:f3:68:fa:e6:df:b0:0e:43:91:c2:c9:95:6e:45:
         b9:27:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:39:15 2025 by rpki-client