Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab3971e0-8afb-38be-b504-2ffbb2566997.roa
File:                     ab3971e0-8afb-38be-b504-2ffbb2566997.roa (raw, json)
Hash identifier:          raLUx7ztlavY7/spnCpxiF0H8LGGz0iOcfrW0qNs2i4=
Subject key identifier:   79:06:78:72:97:DF:48:14:B3:6B:06:F5:A6:EC:62:6D:96:57:52:7F
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D75976847BA9596C14FFA80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab3971e0-8afb-38be-b504-2ffbb2566997.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        206.180.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:97:68:47:ba:95:96:c1:4f:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=d453f48d-60a6-46e0-9db6-21b18edb5a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:b8:56:ce:c2:33:00:ba:ed:ae:d5:b0:ef:
                    26:7d:a5:ef:59:a7:59:3f:72:e6:f4:ef:81:e5:8e:
                    9f:cf:a5:a3:ec:8b:0b:7d:99:be:eb:45:c0:b0:73:
                    78:26:20:ff:5d:99:03:c2:be:20:d3:41:1e:a5:65:
                    ab:c3:02:e6:5d:18:65:9b:40:2d:46:e5:8d:0e:35:
                    6a:85:bc:ac:36:35:4c:88:4e:56:cb:2f:8f:e4:6f:
                    c7:08:3a:be:56:9d:a2:71:a8:01:5b:7f:8e:5c:70:
                    10:bd:f2:88:e6:58:35:b6:9a:d1:7a:f5:01:b2:62:
                    c2:0b:c1:ed:ca:da:3d:3d:8d:6d:65:ac:4d:5f:af:
                    35:32:62:40:47:d2:f0:e4:d5:33:a1:12:4c:20:42:
                    84:3b:1b:b5:ea:4b:83:01:4e:aa:ee:46:fd:46:29:
                    d3:d6:dc:ec:30:a7:09:4b:2e:ef:79:3f:45:ab:0b:
                    bd:03:35:7c:ef:e6:60:63:48:71:a9:36:8f:d1:05:
                    e2:cb:56:a0:70:db:f6:74:bb:16:7c:35:25:8b:a4:
                    bc:01:20:a5:65:64:c2:7e:17:6e:26:03:cd:83:32:
                    d1:25:ce:06:f4:bc:4c:87:41:d6:df:09:4b:be:e6:
                    d6:a0:30:cd:e0:38:ad:b5:c6:44:dc:83:26:81:5d:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:78:72:97:DF:48:14:B3:6B:06:F5:A6:EC:62:6D:96:57:52:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab3971e0-8afb-38be-b504-2ffbb2566997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:eb:8b:3d:5d:69:7b:7a:75:d5:ac:3e:61:f9:a9:32:92:
         df:4d:f1:41:54:3a:7a:70:36:5b:23:4f:3d:7c:e3:45:3e:9b:
         1a:59:cd:9c:6c:f6:dc:43:07:dd:25:c0:3b:57:87:cd:61:58:
         36:d0:02:77:03:99:99:8f:98:5a:d5:bf:30:d2:c4:61:d1:37:
         5a:74:6e:17:d7:c8:5f:70:9c:23:ec:3a:30:ff:b4:bf:86:ef:
         a8:79:43:dd:3d:1c:a1:83:22:c1:c3:8d:47:4b:7c:9c:f9:02:
         15:51:d0:9d:37:02:ca:b2:31:fd:1a:ee:f2:ad:c4:ec:a2:09:
         22:e9:9f:bc:86:ce:77:e1:2f:f4:a3:29:91:dd:77:f5:83:d0:
         9a:41:54:1f:a7:26:f7:57:94:53:e8:fc:e8:39:46:1e:99:68:
         d0:18:83:2a:6f:c6:b1:f7:4b:97:eb:27:ed:63:2a:0f:83:ff:
         55:cf:e7:da:8a:f5:85:24:c4:94:1d:b3:d6:38:33:47:3e:db:
         62:62:8f:74:d3:e7:12:c7:02:ff:e5:46:b4:e6:8b:54:9d:6f:
         54:66:8e:d0:aa:c7:10:60:8c:0d:38:72:3c:f6:c5:7f:dc:bc:
         a2:96:32:c7:be:a7:5c:19:f3:11:ce:89:d9:7a:55:a5:e7:f1:
         33:62:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:20:46 2025 by rpki-client