Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
File:                     ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (raw, json)
Hash identifier:          2BIa1uYYIQKgDQIhovavw9+B26Blo4b142WAzNaI7yQ=
Subject key identifier:   95:5E:C7:85:B1:D4:4B:DE:7D:34:96:C7:F4:CE:D0:82:75:99:3E:EC
Certificate issuer:       /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial:       010D0C9F43285848197D79B6A29F0854B7862480
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
Signing time:             Wed 04 Dec 2024 23:14:55 +0000
ROA not before:           Wed 04 Dec 2024 23:14:55 +0000
ROA not after:            Tue 04 Mar 2025 23:14:55 +0000
asID:                     397493
IP address blocks:        206.197.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:7d:79:b6:a2:9f:08:54:b7:86:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
        Validity
            Not Before: Dec  4 23:14:55 2024 GMT
            Not After : Mar  4 23:14:55 2025 GMT
        Subject: CN=3117b315-9324-4417-8c7b-167cba76e47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:c3:f2:12:a4:7c:68:d2:50:d3:7e:10:c7:
                    57:04:d8:3b:0c:16:96:d1:27:08:7b:c8:7c:27:f3:
                    5d:52:45:d7:f4:82:28:92:f2:cc:3b:ab:2e:43:32:
                    fb:e1:06:59:2a:17:ba:b7:b8:49:ad:c1:31:ed:ca:
                    5e:30:7b:43:b2:56:e9:30:37:e3:ea:d1:4c:d3:3b:
                    fb:0e:3d:57:85:76:06:00:5d:b4:a0:e4:3e:42:2a:
                    61:08:81:63:b6:86:e8:33:76:6a:05:01:89:99:5b:
                    ce:21:95:4b:c3:95:69:8e:6d:d6:52:71:ca:da:e6:
                    66:99:96:77:b4:5c:63:fa:df:b9:57:08:1f:c9:5d:
                    8b:e7:a3:15:1e:4d:04:30:3a:43:65:34:18:e2:66:
                    a4:be:dc:85:fa:25:52:55:78:8c:c5:42:33:ae:e7:
                    ef:59:ae:ee:b4:3f:86:18:df:1b:e2:e4:b9:19:f8:
                    94:60:df:2c:38:76:c8:07:1a:cb:83:98:ef:e1:95:
                    e8:dc:e2:6d:e4:fd:f4:d4:0a:32:c4:08:e4:7e:e9:
                    5e:49:d5:6e:ff:9a:a7:02:2f:14:d4:63:24:35:c5:
                    df:7d:fb:d3:68:db:01:62:87:86:75:9f:7e:03:82:
                    ab:44:4e:58:8e:30:2a:23:59:2c:b5:ff:c8:8c:16:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:C7:85:B1:D4:4B:DE:7D:34:96:C7:F4:CE:D0:82:75:99:3E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl

            X509v3 Authority Key Identifier:
                keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:1b:05:b9:cc:8b:ec:31:89:7b:58:a8:77:97:6f:8e:5e:
         23:00:f9:fa:a9:0e:df:11:c1:44:d1:cb:cb:bf:1d:51:cf:21:
         f5:30:5c:a8:39:18:55:72:2f:ed:f1:62:d3:21:23:d5:3b:9e:
         7f:6c:cb:f8:8c:d5:50:84:35:43:9a:39:be:43:18:82:84:99:
         af:4c:54:b4:14:a9:db:f7:e1:f0:77:00:19:ff:73:2f:bf:66:
         10:09:ed:75:0e:ac:32:c4:66:8c:ca:17:20:54:d9:6a:95:ca:
         02:db:5f:6f:e7:6f:70:31:9b:c7:32:9c:d3:d0:3c:28:92:f3:
         3f:f1:82:78:31:74:f2:dd:8c:81:a3:9b:54:cf:48:a1:6a:00:
         7f:d1:cc:9e:6a:d7:84:9f:47:30:e6:fb:94:9c:cf:bc:cd:b7:
         b1:15:06:e7:b4:fb:09:89:b3:9f:5d:8b:1d:bf:49:20:75:79:
         6e:7d:e5:3a:c1:30:5a:72:0c:96:4f:c8:a1:05:d0:3e:9c:7f:
         fd:89:e8:12:7a:19:e9:00:9d:dd:22:c0:5d:1b:f8:d0:fb:4d:
         b5:90:6f:c9:b4:9f:6a:d6:13:dc:d8:ac:6a:11:a0:ad:0d:98:
         34:bb:5b:d4:c9:d3:4f:c7:6e:03:70:b6:49:b3:30:2a:fe:83:
         8d:ef:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:49:31 2025 by rpki-client