Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/32cb9a2d-ea49-3e9d-a945-8f5ca686c512.roa
File:                     32cb9a2d-ea49-3e9d-a945-8f5ca686c512.roa (raw, json)
Hash identifier:          GGnC4cDaA7tiNjgjVWBEEjkO1SiUivDvUtWGp4Ha8K0=
Subject key identifier:   5C:83:45:03:04:40:B2:9B:E1:5B:E7:C9:D3:EA:D1:FB:6A:14:9A:4A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285848424AE0C3AD2F269BEDDBE280
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/32cb9a2d-ea49-3e9d-a945-8f5ca686c512.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        207.245.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e0:c3:ad:2f:26:9b:ed:db:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f8aa0f95-ff77-467b-a317-510bedb72bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:9d:eb:8a:bd:0d:3a:f4:e1:d1:35:c1:05:
                    1f:25:3e:0d:da:54:de:75:a4:9d:b0:5a:16:33:8f:
                    3b:f2:c8:19:2d:5c:49:70:36:be:1f:9b:ae:af:3d:
                    12:36:67:7e:b1:6f:08:0a:4a:9c:c6:36:c1:fb:4c:
                    c7:e6:e1:d4:ae:59:09:6d:50:42:75:65:ac:1a:88:
                    61:81:86:a9:bd:54:04:11:72:f3:80:aa:20:27:64:
                    22:c9:82:00:80:cc:e3:8f:9c:09:01:28:1f:26:0c:
                    0f:ce:80:ab:be:b8:b7:7d:24:c0:42:13:ea:70:55:
                    13:93:c8:43:16:52:cf:92:b9:20:1e:4c:7c:ee:b7:
                    c0:e2:a3:06:21:67:2f:4c:5f:cc:a6:e0:ba:1b:28:
                    ac:86:9b:50:8c:1e:34:07:7e:a1:1a:9e:f4:85:ba:
                    f0:e1:47:b0:69:b4:5c:d4:d1:f0:f6:8f:04:0c:68:
                    22:39:40:07:91:c9:f1:b6:3f:0f:b6:a5:7b:79:78:
                    1e:80:a0:3e:e3:8c:85:43:a4:3a:81:9c:11:b2:96:
                    24:19:97:ff:4a:71:24:73:a3:54:b6:fd:9c:f9:3d:
                    8f:28:9d:c7:7a:19:6d:7f:3b:c7:ce:a2:d5:6a:16:
                    1b:b0:6a:75:4f:5a:6c:7e:59:8d:e4:43:ef:3a:6c:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:45:03:04:40:B2:9B:E1:5B:E7:C9:D3:EA:D1:FB:6A:14:9A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/32cb9a2d-ea49-3e9d-a945-8f5ca686c512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:d7:bc:ba:39:12:90:13:12:40:8a:8b:db:26:4b:4e:45:
         dd:8f:e9:4d:0b:50:44:8e:59:e7:b7:ca:db:b5:cc:64:44:cd:
         58:ff:06:00:1d:14:13:a1:38:91:cc:8b:0d:5c:5c:0a:e3:15:
         41:21:a5:cb:b1:63:b3:a2:7a:93:72:d2:ad:42:ba:f3:c4:a7:
         49:67:d8:80:20:c3:63:d1:ac:ef:8e:32:29:ed:50:ea:73:4c:
         28:9a:36:fc:a3:9d:cb:4c:06:54:db:5d:53:1e:68:4f:44:67:
         20:f3:65:e6:32:75:ae:db:56:9d:eb:52:b8:9a:fb:ff:25:45:
         31:4d:80:37:04:12:b4:f8:20:bb:ed:43:bb:97:16:d2:3b:4b:
         d2:53:e0:69:71:ce:64:80:e3:f9:9c:82:5d:19:cb:9e:e1:c8:
         58:5b:8c:f3:a4:a0:dd:59:64:b8:20:36:cb:07:4a:db:e4:97:
         d7:72:f4:a8:2a:41:a1:0f:f4:53:92:af:3a:8f:c9:66:f3:e5:
         a9:65:f2:89:c8:64:78:9a:08:31:13:fb:fb:5a:fb:96:e5:f5:
         7e:a7:6f:b0:0c:cb:6d:7a:9a:ae:7a:04:80:6a:0c:bd:0c:15:
         ad:81:21:ca:e0:a4:4e:49:ab:cb:15:99:df:61:45:60:f3:e3:
         6e:a0:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:12:50 2025 by rpki-client