Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/29e9a8c9-6cb2-3c60-af71-53cc039ee58a.roa
File:                     29e9a8c9-6cb2-3c60-af71-53cc039ee58a.roa (raw, json)
Hash identifier:          Ee5WWckmsCNYiCr06rDC1ugtY7Ji0mOc4SLyZ+cSBPI=
Subject key identifier:   3C:EA:8F:F4:2E:16:D2:59:D3:47:8E:CF:75:B4:7F:D6:4A:71:B2:24
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5005BE53CC931EBFB67160
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/29e9a8c9-6cb2-3c60-af71-53cc039ee58a.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.112.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:be:53:cc:93:1e:bf:b6:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=2d68c7b3-f366-46a6-82f6-1c93a5d7f8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:d1:d5:cb:b5:58:95:8f:f8:21:4f:13:ea:
                    6e:b6:7a:92:76:f8:93:8b:ec:03:d7:ca:0a:1f:dc:
                    bb:a5:15:0a:f8:b3:61:56:81:56:ff:74:97:9f:33:
                    cb:f3:f9:77:48:80:af:0b:5f:36:c6:92:e7:22:ac:
                    45:a3:c8:b7:f7:65:95:07:33:d7:6d:9d:9e:aa:82:
                    1c:61:0a:a5:33:1d:f2:45:5e:c2:cd:09:ab:e4:2c:
                    41:18:48:b4:44:be:c0:81:52:ac:63:31:01:67:0a:
                    bb:56:09:70:51:4d:ce:7d:5f:c0:fe:a0:54:cc:f0:
                    de:25:c4:19:49:65:25:73:31:85:3e:6e:f4:ba:af:
                    c0:98:73:2a:8e:1c:7e:f4:32:18:ea:d2:77:bd:08:
                    2e:9f:d2:3c:bf:8d:35:e8:20:d5:36:cd:4d:9c:6c:
                    30:4b:4c:82:2f:f3:e7:c8:cb:1a:85:fe:4b:64:fe:
                    00:23:df:7b:98:76:dc:98:be:6e:f1:5f:66:93:08:
                    fa:6a:0e:7d:37:3c:47:38:57:46:8e:b0:a4:34:7b:
                    27:d5:8d:7b:d1:ba:fb:6d:4d:41:6b:4b:51:6f:09:
                    de:c5:73:4e:fb:e6:eb:cd:88:42:eb:61:18:ec:14:
                    c2:59:91:9b:da:14:83:df:da:8c:c9:4b:10:36:ce:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EA:8F:F4:2E:16:D2:59:D3:47:8E:CF:75:B4:7F:D6:4A:71:B2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/29e9a8c9-6cb2-3c60-af71-53cc039ee58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:05:37:24:59:d3:61:25:66:1f:d6:72:cd:28:9c:45:fe:
         ba:ee:ef:18:e6:ff:4f:63:71:eb:e7:d7:4f:ea:7f:54:a2:1e:
         c2:dd:81:b4:fd:27:95:5c:47:ea:b9:f1:47:aa:2b:1e:22:05:
         0d:2c:48:3a:d6:36:00:99:1c:41:ae:19:39:25:0e:f3:e8:49:
         84:5d:fa:1d:ad:e0:0f:a7:ba:1a:aa:27:b9:9b:80:8c:47:cd:
         2c:b9:96:85:76:de:bc:5c:ff:fa:4c:a0:53:01:6e:0c:8d:0d:
         50:f0:6b:47:72:bf:04:78:88:7c:af:1d:89:11:66:43:66:6c:
         04:bb:90:46:22:d0:4a:e6:41:e9:c8:40:cb:21:25:58:1e:10:
         3c:8c:5c:94:90:7c:4f:5f:a6:40:55:e1:02:02:68:86:17:aa:
         66:68:ad:02:2d:2e:7a:2a:92:d0:d6:d5:b5:aa:40:b7:b8:60:
         8e:c6:18:3e:33:3c:af:b3:be:61:ae:8f:a1:96:03:ff:f8:64:
         1d:27:cb:7f:ad:61:9f:f6:2e:4d:d5:70:b6:2e:dc:6e:09:18:
         0b:4e:2f:d0:e0:d7:80:59:8f:b4:ce:c7:3a:5b:12:ce:c4:ad:
         a8:a3:0f:6d:c8:8f:89:57:bc:04:33:e3:27:8e:57:24:74:64:
         7e:8b:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:54 2025 by rpki-client