Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa
File:                     1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa (raw, json)
Hash identifier:          vQW+KIiWujeuDdX3htnHKUp+iEnyxt7K+1NbaMUJufM=
Subject key identifier:   F3:59:A6:E9:FA:B0:02:7A:D4:25:F8:51:3F:95:80:B4:7F:6D:BC:CF
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584827C54BBEE1DEBF65802FF380
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     7265
IP address blocks:        216.47.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:4b:be:e1:de:bf:65:80:2f:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=3a53e23f-283a-4467-81d0-1815d3e8c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:5a:a2:4c:d0:0b:e5:ab:fb:8b:1c:a3:df:
                    74:a1:4f:71:db:42:c7:03:dc:5f:f8:0d:4f:1b:5a:
                    80:d9:38:7f:6f:8e:4b:85:51:78:3e:fb:63:dc:27:
                    d1:61:2e:7c:56:a8:c1:11:4d:49:db:87:48:68:54:
                    34:9a:5a:29:de:3e:6b:35:a1:9b:15:2e:65:f7:a7:
                    73:e5:c0:e6:34:94:12:73:a0:e2:51:96:0f:38:58:
                    c4:fa:51:cd:f7:4e:6f:a7:22:00:3a:60:0e:2b:3a:
                    fb:68:42:56:3e:2b:a7:0e:f1:f9:2a:16:8c:ce:66:
                    23:69:a8:a4:15:1f:9d:32:b5:d6:8f:1b:8b:61:b1:
                    86:6f:15:c1:2d:00:11:e1:9f:af:82:4c:7c:0c:64:
                    f6:31:22:07:92:46:e4:ed:d0:a4:dc:4a:c4:4e:da:
                    79:1b:2b:93:93:53:57:54:66:aa:66:c8:ab:f0:23:
                    56:93:9e:4c:88:b0:5c:e0:07:ca:42:60:53:c2:07:
                    b8:6b:df:29:96:b2:ed:78:f3:bb:6a:57:c6:50:1d:
                    31:a1:b4:89:e0:eb:b9:6f:7f:0b:65:93:01:b8:3c:
                    c9:d8:db:bb:a1:df:4f:35:d6:3c:a8:4c:82:e3:3b:
                    e0:a5:ad:ab:a5:bb:7a:d9:c8:4d:d4:9a:c3:18:0a:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:59:A6:E9:FA:B0:02:7A:D4:25:F8:51:3F:95:80:B4:7F:6D:BC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:68:13:b1:7f:fa:50:d4:70:6d:25:46:61:89:c3:ee:b1:
         67:9c:e9:16:bd:41:eb:3d:fe:bc:c9:b6:6a:23:19:e1:85:90:
         b7:48:86:b9:12:43:cc:92:9f:70:20:2e:7d:25:62:4a:33:c7:
         f2:9e:1f:c0:d7:ec:a2:ea:3f:a8:da:b1:ee:cf:d7:c8:cb:f7:
         e5:e8:8b:59:24:b3:b3:19:15:44:ca:53:6f:61:6c:3d:5e:d0:
         21:c7:68:96:e1:a3:ce:6d:5e:37:6d:59:bb:d8:17:cd:1a:1c:
         75:cb:22:51:2e:d9:93:7b:62:c4:59:d2:ca:a0:82:27:5a:ab:
         94:15:13:b7:4f:98:2b:37:35:12:66:ad:d4:3e:7d:8a:7f:72:
         a3:4e:8a:f1:93:64:d7:34:1a:4a:bb:c6:bc:6e:98:d3:97:12:
         68:2b:e6:71:d4:aa:ab:de:ff:b7:f6:f3:83:ab:a3:44:73:56:
         0f:4a:00:44:97:53:6f:6a:a2:80:c5:df:1f:11:e7:81:1e:ef:
         94:19:61:a7:ed:bb:e3:b4:19:4d:ac:81:0a:7c:9c:a7:d8:20:
         71:8f:f7:ba:dc:0d:0f:68:d5:7d:50:21:b2:d1:10:a2:60:2f:
         d4:5a:e7:eb:1f:17:4b:b0:3b:97:a3:45:5f:57:6e:ae:e1:36:
         7d:33:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:16 2025 by rpki-client