Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a21b637-6f6d-3160-98a9-4d6de1da26a4.roa
File:                     8a21b637-6f6d-3160-98a9-4d6de1da26a4.roa (raw, json)
Hash identifier:          zNOcIe55nbxSHYjisqH6pTyl635ht26BvaWglxesaBs=
Subject key identifier:   F3:EA:58:E1:D3:41:EF:28:10:AD:6E:F2:82:AB:E5:69:1E:BF:93:36
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483E1AB3AF53500FDF42A5A600
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a21b637-6f6d-3160-98a9-4d6de1da26a4.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        74.216.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b3:af:53:50:0f:df:42:a5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=3693bba5-e6fa-4068-801a-16f65b8e5547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:44:7e:46:1c:9a:bb:e7:ec:15:e5:b7:d2:
                    92:36:8c:87:67:cb:af:4d:5c:17:fa:63:14:ef:9f:
                    58:8f:f8:89:d8:7e:9b:1b:81:76:a9:c1:c3:8d:84:
                    82:56:81:02:0a:e5:29:e3:0a:1b:9f:7e:bb:48:88:
                    69:2a:a1:ef:53:b8:6c:f6:db:26:f3:a0:17:b3:13:
                    7c:14:b8:94:c5:b7:80:65:83:a1:e3:de:f9:8a:26:
                    fa:12:ea:31:44:a8:f5:ab:9f:fb:9e:52:51:36:62:
                    96:7e:28:c6:fd:1d:1a:e8:5f:b0:83:45:e3:82:4d:
                    bb:de:33:96:7c:51:37:7c:74:21:ef:40:23:b6:d7:
                    a1:52:18:ef:d9:2a:9d:88:dd:a5:ce:f4:29:1c:84:
                    88:8c:35:9d:6c:ce:27:93:6f:ec:96:80:29:8b:d0:
                    d7:79:0b:62:88:85:c5:82:cf:84:38:94:41:14:b1:
                    59:b2:59:2d:fe:b9:e3:ea:f1:e8:33:e9:a6:00:ca:
                    a3:08:2c:b8:5f:49:6b:5f:94:ed:fb:f3:5a:9c:f1:
                    6c:47:ad:9e:8c:1e:6c:f0:83:8f:4b:00:f8:23:00:
                    8b:41:04:0e:dd:17:5f:92:4e:5e:94:16:e4:43:5e:
                    51:a2:a6:bb:3e:96:ef:08:18:90:59:64:89:9e:f9:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:58:E1:D3:41:EF:28:10:AD:6E:F2:82:AB:E5:69:1E:BF:93:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a21b637-6f6d-3160-98a9-4d6de1da26a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:47:f7:3f:f4:12:5c:86:58:bd:1b:70:16:2a:aa:6c:dd:
         38:29:2a:3e:ed:e8:5d:b2:fd:c9:a3:93:89:97:a6:fd:74:5f:
         8a:97:7d:62:64:59:36:93:8d:39:2c:e4:1d:5c:fc:d1:7f:ec:
         bb:66:91:92:0d:4a:4f:e4:2e:2e:29:34:6e:f2:96:a8:61:7e:
         25:0b:0c:e4:73:92:cf:22:65:91:64:d9:4a:37:04:7e:0f:d3:
         9e:3b:7f:42:6b:12:1e:28:be:90:c3:4c:16:55:1f:78:9e:2a:
         9e:8b:86:9a:53:ba:30:d0:6c:bd:c4:65:bf:5b:53:8f:f0:2b:
         72:d1:b1:2a:a8:95:f8:11:6a:f8:fb:8b:6c:7d:18:f3:07:0a:
         b8:6e:5f:c4:3a:28:8a:0f:8c:72:c6:9b:e7:31:8a:0c:6c:2c:
         b9:6b:62:e0:92:bb:17:2e:96:42:0d:59:d1:ee:fd:90:f5:26:
         4d:40:ee:d7:5a:87:24:22:ad:4f:5c:53:79:22:af:96:5e:3e:
         95:d5:11:ce:d3:a1:7b:86:47:24:7e:1b:bc:38:12:a9:ed:9d:
         eb:aa:3e:4f:3e:3c:ea:f7:94:93:7e:2e:fd:e8:26:e9:35:87:
         13:91:af:6d:4a:d7:99:8b:dc:51:08:12:43:ca:b5:88:d7:91:
         9c:15:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:53 2025 by rpki-client