Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f7094bf-352e-3835-ac6f-2cadb313d281.roa
File:                     8f7094bf-352e-3835-ac6f-2cadb313d281.roa (raw, json)
Hash identifier:          O6ZTjYuqckssaprit0MOhInsZ13EH3olwwa/X5/Rh2k=
Subject key identifier:   DF:5D:52:3A:34:A7:39:59:2E:17:0C:AF:26:CE:B0:10:93:FB:2C:41
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584837200BC0BDF476695EBE9B40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f7094bf-352e-3835-ac6f-2cadb313d281.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     7018
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:0b:c0:bd:f4:76:69:5e:be:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=87c93371-0b3b-4216-b85f-54b95ff8988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:8f:9f:15:ea:90:a3:2b:11:f0:0d:cc:f6:
                    09:73:ea:cb:ac:21:8d:36:3e:98:f8:ce:5a:34:7e:
                    a3:71:43:cb:c4:6c:29:39:68:e4:6f:3d:ec:e2:12:
                    27:6c:68:7d:a3:33:58:d0:83:e1:12:1d:d5:f3:89:
                    6c:a5:fc:37:46:d7:fa:0e:71:36:c6:67:e5:e8:47:
                    e2:9d:87:c5:4b:f2:fe:dd:cf:42:fb:24:92:d6:ba:
                    4b:fc:03:dc:3e:39:87:77:e9:e1:1e:72:ad:43:ae:
                    a2:c3:fc:92:ed:c0:5e:2f:a2:2b:a1:db:e1:d6:74:
                    ad:b6:ae:79:3a:c0:e4:ac:80:a2:cf:71:18:45:4a:
                    7c:80:d6:54:f9:79:ec:e9:3a:3d:30:57:23:bf:1e:
                    9b:e4:6b:84:b5:13:c7:b3:5d:14:c1:85:b5:32:b4:
                    af:05:49:dc:9e:09:1e:c0:8c:ef:09:2e:54:5e:b5:
                    2c:5b:e1:c1:a8:26:09:25:97:58:c3:56:61:69:2f:
                    76:68:29:c6:ff:14:44:aa:49:cb:e0:03:31:ab:9f:
                    6e:a0:2d:a8:3f:ec:a8:ed:19:ae:02:5b:13:1c:2e:
                    7f:6a:73:eb:0e:7f:6a:e1:50:89:70:3e:5e:42:42:
                    db:f5:41:38:29:8d:fd:88:af:11:fe:25:42:9f:69:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:52:3A:34:A7:39:59:2E:17:0C:AF:26:CE:B0:10:93:FB:2C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f7094bf-352e-3835-ac6f-2cadb313d281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:a7:6f:71:cf:54:fe:99:4b:af:b4:b1:2e:92:d9:11:9f:
         70:80:45:b2:76:95:7d:d6:82:0a:53:75:80:d7:06:bd:b4:89:
         d5:eb:23:1f:dc:7e:f9:01:19:02:91:30:5d:df:85:fd:df:8d:
         0e:35:23:e0:3f:d1:8c:b0:8e:f9:8a:dc:1b:b7:d8:68:5e:d8:
         b1:bb:5e:4e:67:9a:88:9f:b9:f5:a2:2d:84:b4:47:5c:3f:22:
         7d:12:05:08:2a:af:bd:a0:1c:05:df:7d:37:eb:73:b5:c5:e1:
         e3:b3:53:6e:c1:61:72:3a:de:9f:23:35:e4:d1:f7:71:08:52:
         d8:da:e3:88:59:df:f7:f9:ee:7f:cc:01:65:8c:0f:41:03:e4:
         35:bb:87:e3:41:d0:c4:fb:22:18:64:3b:d3:de:56:de:f2:4f:
         1f:a0:83:e0:0e:cb:b5:bb:3a:fa:43:92:2b:c5:3b:60:cb:a2:
         39:d1:31:73:3d:a5:ce:10:9d:c3:10:65:b5:7e:54:0a:e1:9c:
         e6:58:21:22:e9:c1:e0:94:f4:d8:7c:40:4e:7a:ea:7e:51:18:
         9e:20:0d:6b:cd:d5:7e:71:22:62:21:29:56:61:d9:e1:7e:20:
         29:d0:ba:b6:5b:95:f4:57:54:c7:c7:ab:a1:b2:9a:ba:3d:f7:
         37:7a:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:29 2025 by rpki-client