Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa
File:                     4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa (raw, json)
Hash identifier:          Il2Vixi6VoAI8RmVZDT0kaUMfuqwbv58SF5IXs/8aOU=
Subject key identifier:   07:B0:82:A3:AE:30:48:1B:DD:BC:02:D3:83:16:AB:FA:0B:C1:42:63
Certificate issuer:       /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial:       010D0C9F432858481E737010C2364A2DB82BBE80
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa
Signing time:             Fri 06 Dec 2024 17:53:44 +0000
ROA not before:           Fri 06 Dec 2024 17:53:44 +0000
ROA not after:            Thu 06 Mar 2025 17:53:44 +0000
asID:                     14549
IP address blocks:        208.86.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1e:73:70:10:c2:36:4a:2d:b8:2b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
        Validity
            Not Before: Dec  6 17:53:44 2024 GMT
            Not After : Mar  6 17:53:44 2025 GMT
        Subject: CN=11402b46-be18-4341-933f-93dcc5e19dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:eb:f8:b8:6b:20:96:b3:e5:e5:62:00:59:
                    8b:67:f6:95:34:d5:05:1b:3f:31:16:a6:e8:74:e5:
                    21:32:fa:7e:8c:5b:6f:62:57:64:69:46:eb:b8:0c:
                    8c:65:a0:c3:8a:55:91:f3:59:f5:2b:d5:39:0e:9e:
                    ef:64:4a:09:ee:37:20:a5:dd:8c:3e:9c:e4:64:91:
                    b2:b8:ec:9a:23:93:94:0e:b2:9f:93:99:45:c5:45:
                    35:02:af:18:f8:8f:99:2f:6e:94:db:5a:8a:86:af:
                    bb:96:87:6c:12:86:f2:f3:0d:92:50:06:f3:71:d7:
                    d8:6a:72:d7:22:15:dd:53:1c:9c:da:35:fc:5a:68:
                    d9:1b:11:a8:1f:90:38:06:c2:ab:d4:56:d1:e6:0d:
                    e0:8f:e0:09:c2:36:56:04:f1:eb:56:80:35:36:23:
                    83:fc:93:1f:91:26:69:9d:ea:53:8f:21:64:5e:d8:
                    9e:83:00:d7:f5:56:4f:77:ce:40:2f:6c:53:cf:8c:
                    ee:e4:57:06:01:cb:6e:52:74:67:67:24:ec:12:b6:
                    d1:9a:59:bd:2a:c7:37:af:f2:6d:1e:fb:17:71:90:
                    95:6b:3d:dd:2f:4e:01:ef:43:7f:79:65:51:a3:c1:
                    f0:24:22:c7:3a:93:8b:f3:7c:37:01:e5:da:7a:97:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B0:82:A3:AE:30:48:1B:DD:BC:02:D3:83:16:AB:FA:0B:C1:42:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl

            X509v3 Authority Key Identifier:
                keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:02:ce:5c:7e:a1:35:a5:6d:cc:3c:5f:04:86:53:08:db:ef:
         29:d9:71:c2:0f:af:45:bd:2f:bb:94:a9:2f:43:32:9e:2a:9e:
         3c:99:d8:2d:51:3f:6c:a0:20:ab:c3:1a:c8:e2:ee:aa:7d:18:
         0a:fc:66:6d:e2:a2:58:ac:3a:18:53:67:87:01:b2:9a:d0:29:
         df:92:cf:d6:93:4e:43:e9:ff:94:e5:a0:e9:d3:2a:79:44:12:
         f6:c6:20:8c:da:ae:40:7b:e4:a0:58:ee:af:5f:9e:2e:31:ca:
         38:67:9a:61:6c:3f:8d:66:d3:82:53:35:c8:75:91:1c:fa:de:
         f6:6f:7a:2a:22:34:71:90:5d:5b:ad:61:32:1d:ab:2a:64:c5:
         4e:30:57:33:ed:f4:30:ae:ed:ee:c6:8d:a2:91:34:fa:01:c2:
         1b:4b:b2:59:3c:50:d5:7e:c0:09:16:de:4f:5c:bb:13:76:25:
         90:cc:1b:5d:e5:f9:49:d0:b0:a9:7b:b6:06:52:12:cf:61:21:
         56:a8:3b:94:c9:cb:1c:60:64:37:cc:fd:76:55:3d:fa:f4:11:
         1d:4d:e0:43:aa:43:45:71:9a:47:2b:2c:4b:aa:3e:17:44:c5:
         0f:34:d1:56:68:f8:aa:a5:62:7e:71:19:d3:40:a3:6f:ae:4a:
         f2:ca:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:45:29 2025 by rpki-client