Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa
File:                     385e0992-071e-3197-bdb6-fe17ccfb9f51.roa (raw, json)
Hash identifier:          wDfu+b6z2U0pwLtjvfLdrhk76iy4o2dXmv4It+wDtvU=
Subject key identifier:   A4:F4:FF:D0:89:5D:25:41:DC:02:51:23:71:68:3B:56:B9:71:83:57
Certificate issuer:       /CN=b567f52f-9461-4275-9469-41dce04ed9a1
Certificate serial:       010D0C9F43285847FB1A1FCFBF6B92AAC30F8EE0
Authority key identifier: FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     397361
IP address blocks:        216.247.192.0/19 maxlen: 24
                          2607:5c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:1f:cf:bf:6b:92:aa:c3:0f:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b567f52f-9461-4275-9469-41dce04ed9a1
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=933ee852-bcc1-4498-89bf-a32ec1a0ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:b3:81:79:51:d8:e5:a6:b6:d5:92:d5:b5:
                    f5:95:83:fc:94:7a:f1:2f:d9:36:b5:ff:f6:60:30:
                    72:1e:5a:14:e6:f6:ad:85:04:50:d8:04:cf:e7:03:
                    c0:b8:a8:bc:d2:39:42:36:b5:a3:48:97:39:e4:9b:
                    b7:bb:a6:89:8c:ee:fd:43:97:d9:86:fd:20:64:9a:
                    27:a7:2e:50:a6:58:26:48:fc:cd:2e:85:3b:84:57:
                    a1:36:b7:fd:77:22:a5:21:78:24:99:29:b6:ee:8c:
                    27:b2:d8:0a:42:62:b9:47:a1:0d:0f:f3:b6:94:fe:
                    e2:9b:88:2d:d7:ab:00:8d:2d:df:1a:f5:56:d1:cc:
                    0e:f6:a2:58:93:66:9e:f9:90:93:60:b5:ee:26:c1:
                    ef:60:88:91:72:04:99:79:5a:0f:f8:78:3b:7e:c8:
                    1c:9f:ca:93:f5:da:02:1b:05:62:06:0a:36:63:ec:
                    cf:da:94:d4:42:88:25:ae:b8:7f:15:99:93:b6:28:
                    fe:88:52:d4:ae:65:07:e2:41:f5:39:95:65:cf:50:
                    d6:62:45:8f:aa:4b:7e:0d:a4:60:6d:9e:a3:72:70:
                    74:67:de:7a:67:de:7d:01:0a:ec:cb:83:0e:58:52:
                    6b:37:ae:ba:65:fe:2a:77:ae:03:c2:1a:ce:1d:24:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:FF:D0:89:5D:25:41:DC:02:51:23:71:68:3B:56:B9:71:83:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.192.0/19
                IPv6:
                  2607:5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:ff:3d:3b:67:ca:fe:00:97:76:65:fd:b2:2e:44:3b:ec:
         f9:4b:9c:4d:f1:1e:52:97:4a:86:90:01:27:7e:cd:60:b7:2b:
         c7:7d:a3:f1:db:b4:2d:88:0a:e5:44:b4:21:3f:4b:a4:9f:6c:
         7d:81:71:66:a6:3e:6f:13:f2:ae:1f:74:a7:b5:29:80:16:2b:
         cb:65:05:f3:2e:10:16:4e:d6:15:0c:39:71:88:4d:ca:be:5b:
         d7:03:5f:65:a5:30:a4:5c:26:a9:14:12:1f:d5:80:ca:e9:1a:
         3d:4c:a0:fd:f4:f6:59:01:8a:37:58:0a:73:25:83:29:5f:c2:
         2f:f4:db:a4:7d:1a:5d:c0:32:cd:04:26:84:7b:44:2c:91:87:
         35:13:ab:3c:db:bd:c5:1b:43:a3:c0:fb:13:ea:2b:6b:28:d5:
         7b:56:ad:e0:fb:3d:31:5c:ba:e7:06:57:14:f1:51:10:b7:d6:
         80:f3:51:92:a0:a7:e0:b1:9f:10:b2:73:33:cc:d8:15:d8:d8:
         c1:f7:e6:e9:ec:70:74:60:2b:70:6c:17:b8:93:d9:25:32:52:
         a4:05:d9:e5:d2:01:00:e1:57:3d:c6:df:4d:94:9e:b5:20:7e:
         81:2d:58:d2:ac:da:5e:6b:56:9b:64:f5:19:2a:59:a4:31:ce:
         a8:22:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:50:58 2025 by rpki-client