Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa
File:                     112eda58-08ff-385e-b8e1-7e031a98a1e7.roa (raw, json)
Hash identifier:          AR2VozU0fKeSDutGaV0wCogTpTUklDmvdn3u+Liq+ig=
Subject key identifier:   73:94:90:6B:DF:5D:01:FB:A0:DC:A4:A8:07:FA:9E:47:CA:83:46:9D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848143A673A93E8ED2B3DA48480
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     8560
IP address blocks:        216.250.112.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:67:3a:93:e8:ed:2b:3d:a4:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=8b34c338-4fc6-45d3-9f86-ba7769a0a7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:e4:b5:5b:3f:85:a9:3a:d2:f0:1a:15:a3:
                    0b:8b:e9:ae:5b:7b:5a:a8:0c:c6:2b:3d:79:9c:a0:
                    d5:ff:8e:e6:9a:b8:28:cc:a3:24:18:bf:87:a3:0d:
                    03:5c:06:6e:16:ae:9d:ce:64:fd:6d:1f:3a:99:5d:
                    dd:12:53:7c:ca:46:eb:29:94:a2:e5:20:3f:9e:41:
                    b0:03:c4:00:26:a5:50:f4:02:fd:c9:8d:8a:a6:c1:
                    3b:74:c4:fe:62:59:58:93:cf:ee:3f:06:f8:ae:2d:
                    c2:e3:4a:f7:f9:be:09:3b:2a:30:30:ee:62:95:d7:
                    f6:d8:9b:35:77:4e:7b:d4:58:3a:90:de:77:9f:32:
                    f6:b4:9b:67:19:76:a0:e0:e1:56:82:13:bd:eb:28:
                    44:46:c4:a4:e5:41:10:66:d0:69:9a:b2:74:1c:aa:
                    bf:6f:78:3a:05:1a:57:eb:98:d3:bb:53:ee:7b:85:
                    9a:e4:59:d6:cd:c7:de:35:f8:31:2b:c3:04:25:96:
                    27:ee:5a:67:50:bb:57:2a:7b:e1:e6:85:8f:d5:80:
                    91:e7:ba:cf:fe:5f:cc:73:8c:33:5a:e0:8c:d0:9c:
                    42:ca:b8:31:67:d2:27:47:09:91:d4:e9:ca:31:d3:
                    b3:f9:17:a4:bc:36:9c:6a:be:0f:b5:65:d8:3b:80:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:90:6B:DF:5D:01:FB:A0:DC:A4:A8:07:FA:9E:47:CA:83:46:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:7f:14:78:cc:c1:82:05:fd:dd:51:89:d5:a2:9b:9a:c2:
         e1:14:43:83:c1:00:6e:ce:c1:2f:b8:4d:b6:e7:8e:16:67:d0:
         98:89:dd:e4:c5:eb:5e:d9:0f:e1:63:a2:a3:cd:2a:2c:e0:0d:
         db:b9:d1:fa:2a:c1:36:df:03:9e:27:50:87:92:8c:39:96:9a:
         04:fd:1d:00:02:dd:a6:71:fc:a2:15:09:02:54:54:06:4c:a7:
         c7:de:85:a9:0e:43:0e:e5:2c:a6:cb:5b:1f:55:c0:2c:e2:f2:
         0e:3e:a1:da:a1:a9:4f:7d:0f:4c:83:c3:e1:30:e9:6f:36:63:
         67:fe:20:fa:3a:59:dd:8a:fc:67:07:b5:a6:28:98:ab:33:69:
         e4:a2:93:29:27:2e:ef:81:f9:ec:02:71:f9:1a:1c:f0:e2:61:
         a3:c6:80:80:c1:4b:e6:dd:be:4c:9f:88:f4:88:ca:31:92:33:
         11:3b:e7:c2:07:f2:98:45:27:a1:92:ab:00:87:56:42:37:f1:
         1e:91:e2:49:1a:21:8a:fd:3d:76:a0:25:b9:1f:a1:0f:cf:be:
         89:ef:57:f5:00:3d:47:13:44:1c:b7:d4:ed:d3:de:fb:12:78:
         57:0f:c0:22:27:4d:60:22:f8:19:b4:c3:1d:47:be:56:d7:d9:
         92:d5:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:20 2025 by rpki-client