Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/17e06308-57f3-3ace-8cdf-1e5bf9801446.roa
File:                     17e06308-57f3-3ace-8cdf-1e5bf9801446.roa (raw, json)
Hash identifier:          4QqSklsQftTsU8bilJ3MViDOrtaCqKZj+gBnK0nc8a0=
Subject key identifier:   59:DD:84:67:BF:D3:72:EA:EB:B4:35:0C:A9:98:08:10:ED:94:F4:31
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F432858486EF5C29C41BF139FBF77C070
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/17e06308-57f3-3ace-8cdf-1e5bf9801446.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     13389
IP address blocks:        216.179.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:c2:9c:41:bf:13:9f:bf:77:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=1e9ad200-b42c-4322-917c-2c2b44b138f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:a8:70:e6:43:cc:01:b4:f1:c6:0d:88:bd:
                    c9:fa:18:2f:5e:8b:57:a5:3a:e7:12:da:51:a6:88:
                    61:82:8e:a0:60:a3:0d:02:00:0c:37:9c:ea:a4:23:
                    2e:fc:0f:5f:52:58:8f:a3:77:ae:81:d1:d1:ef:c6:
                    ef:e7:7e:79:3b:56:a3:84:07:0c:57:ef:62:c9:88:
                    d6:b9:49:03:f7:29:1b:c2:e1:46:7f:a4:1b:71:44:
                    9c:b4:8f:4d:29:ff:6b:a2:6f:8e:08:13:dd:ea:97:
                    e6:32:b0:05:27:0b:df:43:94:09:75:26:4e:4b:51:
                    db:2d:9a:11:de:2d:07:53:0f:40:96:1a:cb:66:06:
                    15:b0:6e:7c:35:4e:71:3d:13:9b:ba:35:25:a4:02:
                    ad:7d:59:15:7f:b3:7a:29:04:20:46:b6:ed:e9:a9:
                    a3:9d:32:fa:87:9d:e5:f1:0b:d7:cf:04:47:15:38:
                    8d:38:ff:d3:e9:0a:45:72:59:6d:ac:7b:67:a9:88:
                    92:a9:98:e0:d6:b7:18:66:83:bc:f0:13:26:4f:15:
                    3b:69:90:36:09:2b:3f:56:31:56:de:b0:80:94:64:
                    60:23:8e:28:fc:de:43:41:55:a6:8d:0b:fa:0f:37:
                    5b:55:a7:a6:8f:65:23:ac:87:f6:cc:3e:75:f0:c8:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:84:67:BF:D3:72:EA:EB:B4:35:0C:A9:98:08:10:ED:94:F4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/17e06308-57f3-3ace-8cdf-1e5bf9801446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:f9:bc:06:3c:91:a3:db:0c:d8:84:26:8f:6a:c0:79:6f:
         92:5b:11:97:54:20:25:32:85:21:b8:f6:24:29:de:1f:1b:20:
         35:ac:43:10:8c:c2:9d:6d:7a:ea:36:81:83:7b:67:4f:cc:6e:
         33:a7:37:e9:28:e2:54:29:0c:3e:db:b2:46:e7:39:3f:f1:2f:
         d5:44:e3:da:68:f5:b9:d6:19:81:9d:4e:e9:25:b3:d2:b1:4e:
         2c:0b:3e:df:df:ee:99:f9:05:90:53:97:32:26:82:bf:c1:69:
         72:89:f7:86:8b:e9:40:75:54:51:fb:24:3a:9b:2c:91:51:c0:
         4f:7f:f4:3e:06:17:11:77:48:2b:1a:ce:1f:d2:e8:18:09:2b:
         23:56:3a:7f:75:a1:44:64:63:ef:5e:7c:1d:06:37:70:5e:85:
         97:c4:1e:b6:75:0e:b3:c8:7b:a6:2d:37:b2:5e:d6:5a:74:c4:
         3b:d5:db:e4:f3:fd:5a:f3:17:35:c7:2c:c4:cf:f0:3d:86:25:
         dc:76:f6:e2:75:27:ae:d5:fb:9f:b4:60:65:04:81:5c:8f:98:
         8e:82:30:03:41:34:db:0b:dc:fd:c5:61:e4:0d:78:a9:90:20:
         59:85:c7:a1:50:53:74:ff:44:98:5d:53:b8:09:2e:0c:1b:4c:
         dc:05:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:34 2025 by rpki-client