Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa
File:                     da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa (raw, json)
Hash identifier:          u9UCsSCoZe05CqUiNwvc6EcL77/ID19imqhy9T3vF60=
Subject key identifier:   1D:0B:BE:A8:45:F1:34:78:56:09:42:D3:17:1B:3C:1C:75:E3:39:AC
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858485CD0357EC34EBF65ABB215C0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     46887
IP address blocks:        208.38.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:35:7e:c3:4e:bf:65:ab:b2:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=0cd4e97a-0385-440c-8b19-f52d9f24b98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:d6:be:cc:7b:85:12:8d:dd:52:be:ee:e1:
                    57:08:bb:73:f4:26:e2:f7:26:cf:c5:35:7f:31:a8:
                    13:68:64:dd:d0:6f:c2:d3:76:cd:e8:15:4a:06:8f:
                    d9:e1:99:1a:1e:08:fa:7e:b0:35:ce:fa:e4:1c:8f:
                    e2:9a:88:a5:a7:00:99:a1:93:7e:08:e2:f3:11:33:
                    38:52:10:71:91:ea:ad:53:09:f2:14:6f:d8:1c:42:
                    0f:99:2e:fc:41:74:db:a1:74:4e:27:d9:55:fa:cd:
                    0e:4e:e7:21:4a:75:88:20:02:41:89:1e:7d:85:6a:
                    b3:18:5d:98:bf:d4:bb:0f:b2:e6:5c:5d:17:97:2b:
                    e5:69:b2:ef:f4:54:09:9d:34:bd:db:0c:6f:a2:10:
                    1d:5a:92:74:af:5d:cd:1d:18:e7:3d:af:78:ce:f9:
                    f5:46:08:3d:a2:4c:5c:c6:f5:35:91:44:2d:fe:97:
                    1a:ea:89:3e:17:a3:0f:da:cd:d2:3e:79:db:5a:59:
                    50:d9:89:79:4a:88:dc:e3:19:81:62:db:90:78:19:
                    63:2f:93:17:e0:ae:de:9d:09:1e:6d:57:26:b5:77:
                    2c:cc:b4:e1:45:18:0c:6a:b1:a0:e1:a4:72:fd:b9:
                    7f:f0:e9:6a:b4:56:32:32:a0:42:a6:20:71:85:e1:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:BE:A8:45:F1:34:78:56:09:42:D3:17:1B:3C:1C:75:E3:39:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:83:92:7c:c3:f8:06:e9:45:c3:fa:87:b9:21:51:3f:b7:bc:
         ed:4d:ad:06:e0:57:1d:55:f2:71:95:6a:16:fb:d7:68:ff:81:
         d5:d3:43:a8:94:ec:bb:c1:94:02:e1:3a:e9:a0:54:c3:09:1d:
         56:70:17:69:f8:fd:39:e2:8a:c2:a4:2c:f9:87:08:8b:cd:e0:
         5b:1d:d5:14:82:58:76:35:00:7a:44:8c:51:ae:a0:ee:d9:d2:
         89:bb:4c:e9:7b:f1:1c:36:b6:30:98:d8:ff:71:83:3a:30:9b:
         fe:7c:0c:7d:3f:3a:1f:c1:57:30:ca:13:fc:33:37:63:1b:60:
         b6:a7:24:79:4b:ed:96:63:2f:15:37:4e:92:62:c1:3a:4a:ff:
         11:3e:ee:48:cb:58:aa:7a:b5:ef:49:5b:2e:5c:99:2a:fe:fe:
         59:66:d9:9d:81:a6:84:15:d7:37:48:03:af:9d:e5:48:3b:55:
         bf:8a:98:df:95:f1:f7:68:33:05:12:a5:5a:3c:db:cc:af:4c:
         94:5e:39:2b:95:a4:31:b5:7a:0c:b3:16:d9:0d:b6:47:14:01:
         28:1f:1f:be:ed:cd:ed:01:19:17:1f:05:96:b5:6c:bc:72:bf:
         31:a2:1a:c1:5a:db:fe:1a:e0:a2:59:d3:7e:84:87:0b:39:4e:
         fb:57:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:03 2025 by rpki-client