Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa
File:                     fb97fe62-d69c-303f-82f4-0933263566b8.roa (raw, json)
Hash identifier:          JToZIliRunOw5Fr8Mr5bGHq/0Gc4ShmJbYhPxJlRINQ=
Subject key identifier:   91:ED:4F:99:87:A5:FC:15:B0:A1:FC:5E:16:AA:CE:C2:BA:2D:19:7D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285848424AE0EB33CA0D03E150A9F0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        209.112.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e0:eb:33:ca:0d:03:e1:50:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=c1535008-4903-47bf-8e19-c247a0191bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:a0:55:52:d0:9a:03:e6:c3:1f:14:5c:ba:
                    b7:a4:81:0a:d9:8e:13:d9:bb:59:b6:19:59:11:c8:
                    ce:0f:0f:63:af:b3:46:88:27:15:03:ff:da:cd:75:
                    b4:21:48:56:00:90:be:0a:6e:84:22:e5:a2:d3:c7:
                    3b:8f:7f:1b:a5:b6:af:22:3d:ac:df:fe:02:9f:d9:
                    df:34:25:86:fd:4c:32:4c:4e:d3:53:36:56:ff:49:
                    6e:8e:05:3f:45:d9:f7:84:a1:95:ba:d1:e1:28:22:
                    f4:b7:d4:ef:56:41:8a:aa:94:3e:82:d7:b8:72:6f:
                    b7:c3:4d:32:e5:82:4c:06:74:8f:aa:67:72:12:c3:
                    89:96:57:9f:da:f8:a1:cb:c2:9d:3b:bd:dc:ea:59:
                    0e:fc:57:39:37:0f:83:64:6e:77:0e:5c:e9:ed:f8:
                    27:58:fe:f0:78:fd:34:01:ca:4c:81:ea:69:69:49:
                    49:5f:f0:53:09:5e:d8:c7:84:d3:c9:99:2a:88:13:
                    5a:2a:2c:f2:3a:39:b7:c2:d2:1d:8f:b3:89:c0:2f:
                    94:9a:55:d3:c9:19:2d:24:c8:b3:b2:95:69:7d:c6:
                    14:32:54:7d:e8:e9:50:55:6b:84:5c:bb:89:0e:d7:
                    ad:43:64:91:9c:9a:86:6b:91:b1:4f:bb:10:6e:9c:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:ED:4F:99:87:A5:FC:15:B0:A1:FC:5E:16:AA:CE:C2:BA:2D:19:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:96:a9:ba:ac:10:7b:86:5f:9b:de:34:27:9d:e9:6d:72:
         bf:0d:d1:0d:ba:c4:56:76:f7:75:22:a4:4c:69:37:b9:81:3e:
         2e:1f:7a:64:5c:de:0a:d5:d8:89:d6:45:bd:b6:a3:79:1a:c5:
         1c:61:b1:a9:d1:f1:3c:8e:af:73:40:c3:ee:d9:4a:16:c3:c4:
         09:4c:27:b4:79:fb:51:79:d3:85:ef:aa:1c:3e:59:62:54:48:
         f8:6f:19:a1:47:c0:ea:99:66:f0:dc:b7:03:cc:70:e6:6f:47:
         b6:49:cd:e1:36:ec:38:17:13:7f:78:7f:4c:fa:fb:c0:ce:d2:
         18:db:92:22:c5:9c:74:25:83:4c:52:b1:9d:ba:00:32:97:13:
         4b:15:fc:b4:b3:34:70:e8:a5:a5:a1:f1:a0:b3:56:5f:b4:cb:
         9a:f6:64:01:f2:c1:02:fa:3e:96:64:7b:c2:93:6a:0c:92:7b:
         bf:86:4a:33:9c:17:bc:9e:86:66:d5:1c:c5:9b:77:cb:ab:7e:
         f4:09:55:6f:c1:3b:38:ca:a3:79:3f:99:a2:c1:0b:09:f4:74:
         9c:9e:d3:b0:66:a3:c7:40:bb:af:40:10:63:79:4c:bf:38:ed:
         25:2a:62:01:52:39:42:74:d1:db:13:1f:82:e0:b0:70:7f:82:
         87:01:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:07 2025 by rpki-client