Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa
File:                     1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa (raw, json)
Hash identifier:          kArEVbTEfjX7WWloUlkisywv6dcbi3QbjsfofCbhr1A=
Subject key identifier:   8F:5D:A2:16:40:1E:2F:F2:9D:62:DC:75:66:F3:D6:2F:41:A9:25:81
Certificate issuer:       /CN=ff3f112b-a6d8-4720-982d-117f151ed213
Certificate serial:       010D0C9F4328584832EFE74E9672456CCAB0E280
Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     401348
IP address blocks:        72.46.24.0/22 maxlen: 22
                          208.73.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:e7:4e:96:72:45:6c:ca:b0:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=80e01e49-842d-4f90-9b2f-00ec48cfe8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:c2:b8:d3:e2:74:09:15:de:53:51:8f:6d:
                    00:b3:9e:ec:2c:39:bc:0a:f6:e8:f6:aa:2c:79:44:
                    8c:b8:68:98:a5:86:89:4d:d0:4b:21:bf:a1:3c:0c:
                    9b:29:91:4b:ea:ec:26:b7:9d:8d:10:56:5e:0f:b0:
                    0e:32:99:80:3d:76:99:05:dd:35:d3:83:d4:7f:a0:
                    f0:c2:fb:2c:ce:dd:d6:5c:10:d2:40:f3:50:38:40:
                    e6:e3:d3:1d:15:6c:a0:04:35:7e:3e:75:f0:9c:95:
                    7c:46:dd:ac:98:e7:2b:6d:73:0d:1d:bd:b6:9f:5e:
                    2c:5e:35:67:10:3d:33:16:42:9b:73:b3:4e:f3:40:
                    30:75:7a:1c:58:f9:b0:0f:51:1e:bc:64:ee:81:7c:
                    6b:7b:70:98:be:07:8f:72:b2:49:2b:be:37:d3:8d:
                    13:6a:25:4a:00:59:94:e1:c2:a2:47:bd:bd:26:ee:
                    e6:de:77:5b:f5:53:be:07:59:48:c5:ce:28:24:ce:
                    5d:7b:e3:d5:f6:9a:99:de:a7:48:4a:08:4f:da:7f:
                    a9:90:40:84:41:16:35:f4:ef:07:ef:8a:47:8d:e3:
                    b0:df:8c:4e:d1:24:4f:e4:44:64:16:25:cc:14:2e:
                    a5:64:bb:ce:5b:02:02:94:61:11:60:56:71:c0:64:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:A2:16:40:1E:2F:F2:9D:62:DC:75:66:F3:D6:2F:41:A9:25:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl

            X509v3 Authority Key Identifier:
                keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.24.0/22
                  208.73.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:50:a6:74:9e:b1:1b:30:9e:45:32:58:2a:3c:25:14:89:d4:
         4c:20:fa:27:49:a6:a8:3f:fa:22:aa:ab:c0:92:3b:b0:12:70:
         77:0d:fa:2e:21:33:0e:74:19:5c:92:22:7e:65:f9:a0:b4:77:
         30:0e:c2:f0:07:02:79:13:0a:14:a3:ab:8b:be:51:fa:b5:8f:
         4d:d9:9b:e5:44:38:f1:6c:42:94:55:dd:8c:6a:3e:95:3a:9d:
         2c:88:c0:16:fa:30:ae:5c:f2:3a:44:86:5f:6b:81:6b:be:a7:
         0a:bd:2e:fe:d1:0e:56:52:96:18:03:ca:04:3c:db:4b:d3:ee:
         71:45:c8:ef:8b:56:cb:4b:a5:20:83:89:2d:dd:ac:d1:94:96:
         80:ed:b2:fe:c0:ec:cd:89:2c:38:3b:8f:4d:ff:3d:a3:85:86:
         f3:76:ef:eb:3a:26:26:25:94:94:92:01:f8:d2:11:e5:32:04:
         e0:9d:61:82:d1:24:5c:36:8f:42:62:e5:42:50:eb:ed:8f:4a:
         43:1e:b8:20:34:c8:7b:de:9a:b1:1f:e6:ec:ca:c9:dc:c1:1c:
         c9:a9:86:34:ce:7f:ad:28:43:8e:d3:b4:df:e4:c2:00:b8:ab:
         5d:2b:eb:53:d4:77:ba:c4:73:e3:24:ba:43:8a:84:ef:53:75:
         cf:50:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:26:24 2025 by rpki-client