Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
File:                     bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa (raw, json)
Hash identifier:          +s4mVIYIeKMApxNSD7+yNLIcCy269qU6EgI3Yh+xl0Y=
Subject key identifier:   BD:6C:5B:20:9E:CB:E2:FE:BF:6C:FF:3D:DF:11:25:B4:2E:49:DA:C4
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858481C9A7FC03E56AD4CFBD6CA80
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     33185
IP address blocks:        104.167.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7f:c0:3e:56:ad:4c:fb:d6:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=296aa1c4-73f1-428a-ae6e-bf4487af5e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:26:d5:aa:2b:aa:ae:09:c2:8d:1e:64:89:
                    7f:15:c7:9c:4c:0e:e1:1c:0d:d3:54:91:e1:21:ad:
                    51:2d:ac:ab:b9:db:58:e4:85:57:77:4b:5e:78:ac:
                    61:29:b7:88:f8:bc:23:5a:14:97:5a:b6:0d:37:f7:
                    66:91:96:13:66:13:76:2a:52:57:15:c6:85:ca:fc:
                    d2:af:11:bc:4b:a4:b2:b9:69:f2:e3:8f:3e:98:99:
                    11:0e:09:39:11:1e:75:a9:92:9f:fd:4e:8f:38:4d:
                    1d:d7:a9:f4:23:c1:c7:57:6f:4b:bf:4f:e9:1a:3d:
                    98:83:55:9d:b0:e3:29:12:e0:41:5c:a6:58:cf:61:
                    42:55:73:0f:cf:ac:3a:86:6d:c2:80:77:41:1b:78:
                    a6:b5:b0:97:a3:31:de:de:d8:6e:95:08:dd:bc:15:
                    2a:8c:b1:cb:71:ad:c6:fd:0f:e2:37:85:23:f5:af:
                    8a:0a:6f:95:08:37:01:dc:88:1e:93:59:4f:bc:34:
                    62:c8:d5:64:9d:63:83:54:b9:73:0a:84:ac:4d:12:
                    99:8a:1d:a4:35:56:b0:25:fb:13:23:53:46:88:2a:
                    0b:ad:aa:2a:95:91:65:f5:46:b2:36:cc:79:d9:80:
                    4c:b1:99:d5:67:8f:6c:9c:95:a8:22:32:cf:26:5b:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:5B:20:9E:CB:E2:FE:BF:6C:FF:3D:DF:11:25:B4:2E:49:DA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:fd:83:9e:fc:33:85:1c:fe:dc:33:8b:6a:06:22:7c:73:de:
         32:3a:51:58:0e:12:01:b2:86:f3:77:7c:81:7d:ed:68:ec:23:
         fa:53:4b:ea:af:ae:41:39:f1:70:06:a0:4a:64:be:7f:c5:c4:
         cc:1b:02:40:7e:c2:35:d2:b9:1e:d7:28:68:7d:2f:6a:f2:27:
         f2:1f:a8:5e:b7:43:e0:a5:e0:f2:b7:72:48:a0:b5:b2:c7:ea:
         b3:6c:fd:0e:4c:fb:09:e5:f9:51:69:8c:1f:9f:78:44:e5:c9:
         42:df:a3:0f:f8:7c:c6:88:c1:aa:7e:7b:e5:13:02:54:3f:b1:
         85:d0:e9:14:86:d1:a2:5e:c6:92:62:0d:3d:34:e2:bf:97:72:
         8f:aa:c0:5a:d9:b5:40:96:70:9c:1d:a5:3e:07:80:ac:78:a1:
         13:11:ac:52:e2:9c:a0:7c:35:50:07:e0:41:9f:05:70:b1:1f:
         40:d1:f1:9d:95:7e:48:2e:85:cf:1b:24:79:17:40:ca:f0:e5:
         ed:51:97:f4:7b:2e:da:06:a0:4f:f2:87:2f:50:31:af:cd:4e:
         45:26:28:45:86:b3:56:08:c3:e2:95:dd:d9:0c:89:c6:7d:4b:
         b4:f1:f9:cf:94:cd:7b:0f:e8:5a:96:85:bc:67:a2:a5:2c:78:
         a2:e3:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:13 2025 by rpki-client