Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2e6d0f49-d4a6-3d2b-aa9a-70bcd95efa34.roa
File:                     2e6d0f49-d4a6-3d2b-aa9a-70bcd95efa34.roa (raw, json)
Hash identifier:          Z0XL32Vz60NMBRurdW35BcwMWUQZ5bndpwpTiJhi5BA=
Subject key identifier:   3A:62:29:73:97:07:CC:F9:A4:0E:A7:28:E3:60:A8:71:E5:C9:7B:DA
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E62B5927B591B74C862643C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2e6d0f49-d4a6-3d2b-aa9a-70bcd95efa34.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        208.117.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:59:27:b5:91:b7:4c:86:26:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6aaaa9e4-3d35-47f7-a80d-5e44c349c60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:b6:3c:de:c6:1a:e7:32:e6:c1:f7:47:43:
                    1f:6c:d1:f1:9e:2d:8b:48:a4:27:90:f2:ed:3f:cc:
                    ca:e9:e9:f9:ae:43:72:5a:9e:fc:96:24:66:69:84:
                    39:fa:56:12:f3:56:ec:a3:f3:bb:8f:b4:dc:bb:fe:
                    cd:00:87:72:9b:ef:42:63:bf:1b:78:16:5c:7d:6f:
                    9d:d6:16:3d:d6:9d:c1:4b:97:cb:45:e2:0e:ca:9d:
                    e0:7b:55:fa:41:fc:4a:82:50:35:25:bf:a8:03:66:
                    99:40:b8:3e:70:eb:45:4e:1c:f3:13:e5:77:7b:65:
                    d1:9b:ad:61:00:e7:e7:cb:03:d7:ee:1d:54:21:5a:
                    fb:ff:49:eb:73:ad:91:86:a7:26:33:8f:b8:d6:7d:
                    0a:cf:2d:28:0f:49:0a:2c:d8:39:9b:05:26:76:f2:
                    02:50:f8:60:39:8f:80:ff:26:85:c6:bd:c1:b3:1c:
                    b1:ec:6f:d0:32:98:7b:ce:a0:c3:45:79:37:8b:05:
                    f9:e9:21:d0:10:2b:55:da:2d:30:ac:39:8a:25:4b:
                    07:36:f2:c7:d7:55:2f:fb:bb:85:e4:41:33:d9:43:
                    97:26:39:2b:b4:e9:5f:26:65:f5:0f:8e:55:14:13:
                    f6:41:88:50:e8:46:3c:cb:cd:8a:be:fb:36:a4:71:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:29:73:97:07:CC:F9:A4:0E:A7:28:E3:60:A8:71:E5:C9:7B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2e6d0f49-d4a6-3d2b-aa9a-70bcd95efa34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:67:c1:d8:60:3d:96:35:b0:ec:2b:5d:a2:d6:4c:d0:ae:f6:
         e4:68:48:e4:da:d8:c5:a5:ef:3b:27:f5:ed:cb:5e:1a:bd:70:
         a3:14:8e:d9:c0:77:b1:ea:36:be:71:aa:84:81:21:b9:f1:ee:
         dd:ce:07:11:18:d8:b3:2f:c2:13:8a:90:6d:94:e3:1f:7a:47:
         13:6e:0d:e5:16:ec:68:0f:7f:7b:ee:70:aa:eb:e3:d8:58:0e:
         da:b9:56:a9:a4:b0:70:d2:4c:1a:34:47:0a:1d:30:65:d4:4b:
         db:86:c4:c7:49:72:74:f2:69:6e:c0:37:14:3f:ce:de:97:5d:
         2c:d2:94:0f:41:7f:6a:0d:a9:41:59:16:e8:7f:94:ba:da:d2:
         ee:8f:8e:fa:ab:27:11:c8:90:5d:bc:8b:54:09:42:ff:8d:72:
         ad:64:4a:0e:9f:e3:93:29:6f:e2:ce:0a:46:d4:f7:73:c3:a9:
         72:df:00:22:cd:3f:b8:0c:bb:72:65:88:18:51:7b:c7:3d:19:
         7c:81:85:c3:6e:bf:7d:ba:75:d6:41:bb:6f:fc:10:91:53:f2:
         65:23:f2:84:ea:18:77:ad:b8:45:18:79:58:37:7b:e4:6c:20:
         b3:37:28:b3:2b:f2:7b:95:27:88:0c:52:87:38:54:51:b8:ae:
         dd:59:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:17 2025 by rpki-client