Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/14c2a544-21d0-3281-b3e8-0dd07e70afdd.roa
File:                     14c2a544-21d0-3281-b3e8-0dd07e70afdd.roa (raw, json)
Hash identifier:          AlGAPHsCfCXiLsxEgS+kodDStOdOl8CX51L3C8C5AsI=
Subject key identifier:   64:8A:00:DB:F2:4D:E1:10:44:5F:7C:C2:33:CF:88:D8:C4:5C:D1:F9
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858485CD0356D6D0CB3EAA57B3280
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/14c2a544-21d0-3281-b3e8-0dd07e70afdd.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     11512
IP address blocks:        208.38.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:35:6d:6d:0c:b3:ea:a5:7b:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=2f92d346-c39b-4838-b2a5-4b8f9f159eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:9b:b9:9f:b6:4c:5e:f3:0c:5c:71:6a:37:
                    97:fb:23:c6:a3:5f:08:7c:f9:7e:cc:0e:f2:c2:5e:
                    25:36:ae:b4:88:56:61:3c:60:74:ff:28:cf:25:95:
                    c1:4a:46:45:5a:1c:4e:79:54:cc:a1:4b:22:29:76:
                    17:ea:bb:ea:71:71:85:18:11:cb:26:32:65:ab:71:
                    76:cf:5a:3f:6e:27:40:bf:c3:c5:dc:9f:0c:89:19:
                    1c:98:32:72:f1:cc:b4:8b:9c:d9:07:3b:65:32:ee:
                    e9:f5:6b:45:2c:73:e0:2b:ee:aa:1a:b7:1c:14:7b:
                    38:d6:53:a9:31:2f:a2:eb:48:74:cc:8c:c6:b4:19:
                    fd:a1:bc:af:27:b8:44:f0:e8:8f:64:23:f9:63:e8:
                    06:4b:54:44:24:a6:7c:9f:3a:a5:8e:5d:07:72:85:
                    6c:51:2f:a1:00:d8:fb:cc:1e:c7:68:53:38:b7:cc:
                    b6:8c:98:6d:68:cc:bc:12:29:c0:1b:a9:3d:e1:c2:
                    09:c1:e6:b4:50:85:ed:90:8c:25:7f:38:47:f6:ba:
                    f8:1e:97:1a:7f:0b:54:c3:12:b0:eb:43:70:04:7a:
                    78:62:f2:64:a6:f3:36:71:0b:c7:d9:38:68:b6:cc:
                    c4:1a:ac:4e:06:1b:47:81:da:57:09:75:b1:3e:45:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8A:00:DB:F2:4D:E1:10:44:5F:7C:C2:33:CF:88:D8:C4:5C:D1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/14c2a544-21d0-3281-b3e8-0dd07e70afdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:03:ac:78:2e:e2:f4:fe:19:30:43:c5:08:d3:82:b6:fd:e7:
         ca:1e:a6:28:17:38:26:76:67:2f:c1:73:39:42:7a:40:09:53:
         54:f7:b1:12:c3:e2:27:e2:e2:f1:ec:91:a5:dc:fa:65:ae:42:
         42:eb:e8:78:53:2a:b6:2a:35:1b:60:3b:16:a8:f5:af:9b:40:
         21:66:d8:e3:e6:c2:a4:35:da:19:5a:98:ee:a8:50:35:31:46:
         57:11:ae:d0:ae:77:38:59:ec:f5:95:c3:b9:0f:36:81:e1:ae:
         1a:56:de:06:79:b2:cb:87:80:4a:07:41:96:0a:a7:ca:97:4d:
         31:8d:38:28:37:e7:33:ff:67:2b:b2:ee:73:4d:ea:eb:48:98:
         e9:5f:95:b9:4a:3c:b6:f6:bf:2e:02:0a:78:a8:06:c1:06:4f:
         9a:ac:fc:d1:d5:ce:d0:a8:24:35:21:31:f7:e8:60:9d:cb:84:
         54:d3:76:2b:b9:fa:3b:bd:08:dc:3d:0d:cd:a8:63:3e:a3:72:
         a6:17:77:0d:f1:03:fa:66:b4:ec:0d:b6:8b:b8:ce:b3:24:db:
         29:b9:b4:57:3d:0e:53:57:8f:2e:d7:6a:ac:cb:ca:0a:4b:70:
         50:2a:52:ca:43:e9:95:86:5f:0d:92:ad:cc:02:d7:1d:ec:ac:
         07:34:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:54 2025 by rpki-client