Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa
File:                     bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa (raw, json)
Hash identifier:          P4z8P4jXeQMCvXQSAP9wl4qfrM53Hka/JeoSABRgzZE=
Subject key identifier:   22:76:15:32:85:B0:74:DA:1B:E9:22:4F:A8:F2:AB:85:C5:33:C7:E1
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858485CD0355C11F43E53E387D580
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     46193
IP address blocks:        208.38.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:35:5c:11:f4:3e:53:e3:87:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=a10318ac-c2eb-49f4-96ca-3577d0fb302b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:9b:ce:8a:a1:c3:87:09:93:5d:8f:b7:03:
                    25:9e:6c:59:39:fb:98:0b:15:ef:27:15:0f:20:53:
                    fb:4f:45:a8:c5:a4:0f:a5:4a:47:31:61:37:f1:77:
                    89:a6:97:be:73:17:ea:e7:e9:a4:42:05:80:aa:c3:
                    90:9d:8b:59:fa:e7:6c:79:ea:06:aa:61:3b:2a:fb:
                    ce:d4:a4:1b:49:46:3e:b8:1c:7f:5a:a9:79:7b:70:
                    d5:20:05:1e:e0:5c:3a:38:08:3d:0f:d6:a7:ca:49:
                    2f:27:cc:15:9e:26:6b:99:e7:eb:de:e3:85:62:e2:
                    5d:e1:c3:b1:9a:29:d5:3d:4e:74:06:d2:2b:79:39:
                    97:7b:b7:3a:31:30:58:08:0c:85:43:a7:91:1d:8a:
                    a4:b7:59:63:ae:83:aa:d1:e7:c9:b9:f9:9a:50:f0:
                    37:b7:eb:fd:e9:de:16:f1:d2:c1:a2:3e:49:80:50:
                    a9:28:8d:8d:d8:1d:42:8e:ac:a2:b8:8c:6e:a9:b5:
                    86:0e:77:56:41:a8:ac:92:8a:9e:b4:97:fa:0a:91:
                    06:66:6b:ea:15:05:5d:0f:5d:c0:5e:57:b3:38:82:
                    c2:75:c7:b9:81:73:c9:5a:c5:10:2f:bc:86:0a:65:
                    fe:9c:4e:0f:03:e2:f4:77:5d:91:35:af:3f:b8:ec:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:15:32:85:B0:74:DA:1B:E9:22:4F:A8:F2:AB:85:C5:33:C7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:78:d6:00:2b:41:4a:92:11:27:ea:15:ed:36:d2:b6:42:17:
         f0:ea:9c:16:d9:68:60:6b:71:e1:8a:11:44:2f:03:5c:42:1b:
         91:4b:a8:fe:fa:d6:bf:8c:da:1b:b6:c9:ad:16:08:d0:5c:8c:
         ea:35:11:ad:2e:0a:ae:a0:8a:74:26:25:85:66:5a:8b:35:56:
         e7:aa:bd:a3:fc:0a:90:72:db:a1:43:56:62:4e:f4:8a:db:5f:
         ca:7c:c4:29:3a:94:5a:21:4b:97:42:7c:0b:a4:7b:df:fc:fa:
         f8:ce:84:ec:35:65:62:12:24:50:42:ef:d5:19:c4:cc:43:80:
         8e:7d:a7:37:f0:73:65:39:17:32:ed:93:00:24:59:98:c6:c7:
         98:bf:1b:72:4f:3f:cb:79:32:a8:16:7a:6c:d4:d0:ee:ee:43:
         9b:09:86:98:75:a1:48:24:bb:5b:5a:5d:be:52:12:9c:11:7a:
         5c:f7:28:d0:c8:c6:8c:78:91:70:b2:aa:c2:0c:5d:93:51:25:
         d3:90:3a:b5:c3:3c:35:78:a6:12:cb:6b:6c:8c:7c:c5:2f:54:
         02:50:26:fe:b2:2c:5d:d2:cd:98:6f:33:e1:f6:5f:eb:e5:bf:
         0a:74:13:ea:ea:19:b1:1d:08:fc:26:51:8b:3b:98:c7:5b:2a:
         bf:a2:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:33:14 2025 by rpki-client