Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
File:                     f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json)
Hash identifier:          7gKlvdR635N7DJaGMG43XbxkFwRS2kEQS9GdmxAZgb0=
Subject key identifier:   5C:C8:5B:3D:8D:D6:E6:DC:94:28:CC:FF:47:4B:A5:3F:C2:21:0A:A4
Certificate issuer:       /CN=714cea24-cc07-46e3-abc3-b9e783b4180b
Certificate serial:       010D0C9F43285848116FB4CCDFDAA9404FF67380
Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     198394
IP address blocks:        216.104.192.0/24 maxlen: 24
                          216.104.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:b4:cc:df:da:a9:40:4f:f6:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=3d578ae4-a09a-44ad-afd4-4ca7b52df11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:07:66:fd:b8:79:03:c3:f4:11:fb:17:68:
                    13:14:ae:5d:08:56:88:01:59:59:22:7a:84:ad:4d:
                    0f:72:2b:ca:91:db:72:a4:dc:40:d6:0e:25:b8:51:
                    62:b2:ce:db:34:ea:50:6e:99:15:32:96:72:86:3f:
                    ae:6f:ff:74:61:71:4e:a2:15:a8:a3:86:38:b7:94:
                    e8:f0:df:10:79:dc:3d:79:fd:ab:2b:dd:8a:35:d8:
                    85:3a:f5:ed:dc:1d:a9:bf:57:08:8c:ca:b5:12:21:
                    78:38:c6:a4:95:ac:57:46:af:3b:87:fa:78:2e:a0:
                    39:47:ec:45:d3:05:eb:e9:b3:bd:84:cb:c8:19:25:
                    69:a8:4e:57:60:59:e4:05:20:c6:70:6c:d8:f3:ad:
                    e8:9a:7a:ab:f8:af:5c:36:5d:ff:58:fd:cb:e4:d5:
                    c3:ab:48:94:1d:e2:5f:e1:bf:e8:31:79:37:93:c8:
                    5b:41:35:9f:df:83:8a:8b:8a:ca:fc:74:8e:22:c1:
                    b1:0c:de:89:64:f1:14:ff:45:0e:88:af:df:ed:ca:
                    de:ea:2d:32:6f:27:7d:be:96:b2:dd:62:68:03:a7:
                    88:e6:80:75:53:7b:d3:4e:8b:41:ac:38:0c:cd:fa:
                    9a:28:c5:83:ed:0c:5d:d8:a7:55:fd:04:48:84:e9:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C8:5B:3D:8D:D6:E6:DC:94:28:CC:FF:47:4B:A5:3F:C2:21:0A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.192.0/24
                  216.104.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:c6:7a:b4:fb:31:cd:c9:a5:b6:c4:65:3d:81:c6:06:6d:
         e9:d6:de:48:30:cc:49:36:1e:0c:06:3d:76:d7:1e:fc:42:03:
         1d:36:92:3b:46:a1:93:0d:55:c0:7c:a0:9f:c2:98:46:db:0d:
         62:4d:54:a7:87:92:3d:cf:51:bb:9e:5b:9d:1d:ab:74:f7:00:
         e8:97:2f:5c:c0:00:ae:e4:e9:f2:b9:09:b2:b9:d4:bf:0b:df:
         30:48:1b:73:20:9f:35:c8:7b:45:eb:a9:23:42:58:9f:20:b9:
         80:28:61:3d:6b:ab:b8:0c:8e:69:0a:aa:16:83:62:56:c9:00:
         1f:44:c5:45:f8:6c:d9:c3:0f:2f:43:fd:3d:e2:96:a8:33:55:
         0a:d2:e4:36:23:58:cd:b5:ff:60:75:32:9a:93:fb:28:1f:b6:
         c7:76:54:81:48:ec:45:ee:a7:6b:24:36:c9:00:f2:69:6b:12:
         5b:91:d4:8c:79:35:64:96:e5:02:f0:eb:2c:7e:8d:d6:f9:78:
         90:9a:05:91:ce:18:7d:c4:e7:1d:3f:3f:98:bb:e0:60:2c:29:
         fa:33:bb:a4:92:e2:87:ba:a8:1d:2b:95:72:e6:ee:23:74:9a:
         f7:7e:5d:f9:93:75:7f:71:44:98:85:ad:4c:da:bd:36:16:5a:
         35:e5:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:04 2025 by rpki-client