Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e232c44e-bb0c-32fa-b19e-4062c9a6f3e9.roa
File:                     e232c44e-bb0c-32fa-b19e-4062c9a6f3e9.roa (raw, json)
Hash identifier:          OXb6EcSJMWqEQUyQRFyLYbyzR+KxAD31XH2bwubzZsY=
Subject key identifier:   AD:3B:6C:54:E2:79:21:F0:6F:9D:2C:5D:93:14:3B:D0:1F:B7:26:62
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C35802EE59ADDEC55BC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e232c44e-bb0c-32fa-b19e-4062c9a6f3e9.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     7018
IP address blocks:        208.89.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c3:58:02:ee:59:ad:de:c5:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=3782e403-94b3-44c8-9d85-e798e31980a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:33:41:f4:69:b2:8d:5f:d3:d8:b8:df:c7:
                    e2:9c:38:1e:28:71:79:76:26:3d:a1:28:18:b5:cf:
                    99:2a:17:dc:0d:f8:c5:39:8d:c4:49:79:be:a7:de:
                    7a:4b:18:e5:d9:ba:f5:91:81:3a:ce:70:24:5e:8a:
                    be:a9:b8:9f:14:65:52:44:9f:a7:6c:15:5d:9f:8b:
                    cd:5c:7c:30:7c:9b:b0:6f:b2:ac:58:20:ce:4a:df:
                    8a:f6:b3:56:84:5b:63:98:4e:96:32:68:99:ac:18:
                    2b:dc:0b:2d:13:43:a1:34:99:09:73:a0:ec:a1:c4:
                    f8:b6:a5:b4:86:d4:54:72:62:a2:80:38:59:60:b7:
                    85:50:b8:9c:0f:f1:83:0a:d1:1b:35:21:1b:fa:39:
                    d9:8c:1c:99:f0:21:40:e5:36:73:0d:4e:a9:54:78:
                    a0:f8:a5:83:51:e8:8f:67:42:d0:18:d7:82:1d:eb:
                    bf:69:c8:98:bc:ec:c6:c9:0c:82:82:1c:ae:43:e0:
                    c1:ba:70:ec:8e:46:df:9d:cf:a5:aa:07:04:db:c8:
                    ab:e2:18:50:df:05:b2:a3:7c:0e:b8:f7:b0:89:d7:
                    25:a9:d8:5a:44:ae:b1:c1:43:07:d7:51:51:fc:2a:
                    ff:2d:f7:00:9d:e3:ba:0d:2d:7d:fd:80:09:c9:72:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:6C:54:E2:79:21:F0:6F:9D:2C:5D:93:14:3B:D0:1F:B7:26:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e232c44e-bb0c-32fa-b19e-4062c9a6f3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:af:e4:ad:4c:7d:04:e8:cb:eb:c8:8a:43:cd:19:81:2f:
         23:de:53:ed:8a:e1:c1:96:5f:c0:3b:46:03:b0:1a:bc:8c:a0:
         a6:9f:87:1a:a6:ed:f8:0f:f9:a6:ff:83:13:6e:8a:42:9d:ce:
         05:91:18:7d:a6:46:46:4e:f8:64:f5:a3:d8:4d:bb:52:aa:dd:
         dd:07:c9:c8:12:74:f0:e9:05:02:da:6f:4f:33:80:f0:ab:51:
         ee:a7:4d:03:1b:e9:2f:7a:cb:42:3c:89:5f:90:d0:36:19:51:
         c8:9c:3b:a4:86:c9:7e:2a:b1:8b:14:14:86:31:65:8b:d9:e4:
         f0:ec:81:cb:28:f7:60:01:fb:99:79:e3:b7:d2:e1:d8:00:c0:
         8e:63:be:db:39:e0:71:94:a3:93:3b:b2:15:e8:11:f6:69:40:
         56:49:54:52:65:a8:e0:53:98:3e:72:ff:e2:ad:a2:12:72:5b:
         af:f5:ee:43:32:79:6e:09:25:49:07:df:c6:26:2e:04:e7:69:
         cb:57:c1:f2:23:50:2a:61:cc:20:21:23:d2:cc:5f:29:a3:5e:
         db:ac:22:c9:bb:45:58:aa:e1:50:06:bd:81:7c:cd:e6:3b:2f:
         55:e3:b1:65:13:19:e2:78:e8:9a:8b:50:88:da:a1:01:03:7c:
         ea:ea:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:22 2025 by rpki-client