Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/097c3fe9-5995-3d8e-a468-28988804dadd.roa
File:                     097c3fe9-5995-3d8e-a468-28988804dadd.roa (raw, json)
Hash identifier:          F8taCb416hwNR9QvjHAC4nljApRuRbIotDYDO/4dNSw=
Subject key identifier:   90:3A:98:C9:BA:57:B6:98:E0:DE:89:E7:73:D0:02:F0:F4:FF:48:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584824FA895450A01A69B6C34D40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/097c3fe9-5995-3d8e-a468-28988804dadd.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     174
IP address blocks:        206.206.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:89:54:50:a0:1a:69:b6:c3:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=12fa1201-f307-4680-9811-b10a4a833304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:f6:04:d6:4f:c6:7f:2c:23:28:ea:71:f4:
                    b4:b5:96:33:c2:84:ec:ec:8b:c0:1e:5c:fc:20:4d:
                    e6:58:8d:94:d4:e4:d4:76:63:ab:1e:68:cd:37:e2:
                    67:fa:d0:5e:56:f0:3f:89:d5:6c:73:dd:da:67:2e:
                    53:3c:2d:63:24:00:8c:4a:80:43:5c:b8:c7:30:a2:
                    71:5d:da:4e:27:91:57:39:a4:79:4f:ea:fb:4f:9c:
                    8e:7d:97:5e:7a:91:66:b7:37:bb:2b:64:9b:a8:a6:
                    e3:8a:f1:c4:61:b4:da:f0:b8:c7:03:3c:a5:cc:60:
                    39:ed:d9:12:16:b3:da:9f:fe:9d:bd:30:c8:59:64:
                    66:e6:46:65:e4:d5:e4:d4:49:70:fc:c9:8c:4f:50:
                    9b:e3:44:79:70:53:98:9f:4f:52:96:5d:82:e8:cf:
                    16:f7:4b:3a:fd:72:9d:81:69:4a:d3:bb:a7:66:1f:
                    fc:bd:92:d6:dc:0f:e9:fe:5b:d3:4a:59:9c:78:22:
                    2b:e8:45:cb:ba:90:01:a7:b9:15:d1:0f:25:69:25:
                    dd:07:de:be:b8:eb:60:bc:ae:21:c1:f8:ec:88:dc:
                    74:0e:92:90:c3:f2:43:4a:87:ad:70:5a:36:d5:91:
                    4b:a8:ed:47:cd:4f:d9:bd:c0:f5:70:62:a5:c5:42:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:98:C9:BA:57:B6:98:E0:DE:89:E7:73:D0:02:F0:F4:FF:48:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/097c3fe9-5995-3d8e-a468-28988804dadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:23:9d:aa:56:4c:ae:72:c7:47:1d:6b:fd:7c:b8:47:11:09:
         d4:16:b1:23:c7:b7:17:c1:65:d9:2f:c3:36:b6:f5:4c:e2:b7:
         0e:7f:c7:c5:d6:ef:ab:41:fa:c0:aa:8d:7d:c7:d3:0f:b5:88:
         b1:a7:d2:33:06:25:60:07:42:ba:32:20:6c:53:a5:b4:92:b8:
         5b:54:a3:e1:d8:11:08:ff:f6:d4:2a:d8:eb:f7:60:1a:ac:84:
         a2:ab:a5:5c:73:e7:6e:cc:36:47:47:51:b0:8e:10:b2:b1:f6:
         de:dd:19:e0:f5:eb:0c:11:fc:c4:2d:d0:8b:ec:62:7f:28:4a:
         79:17:4e:ce:d6:fe:2c:52:9e:79:4e:76:98:a8:88:0b:e4:15:
         29:80:e5:d2:37:99:1f:a3:3e:c6:e1:83:56:98:ce:ec:c1:da:
         42:3d:c8:38:0b:da:d6:c4:93:7d:37:25:e9:ae:4d:97:67:55:
         2d:52:43:f4:6d:11:3b:c6:d4:ed:a1:7b:87:8e:a3:62:b1:5f:
         73:5d:6b:3a:32:de:2c:b7:e2:1d:ac:86:9b:65:b6:3a:fb:65:
         d4:38:b1:cd:8d:9c:b4:fa:1e:d7:94:de:ba:95:b6:db:b7:cf:
         2c:09:07:77:d4:61:4b:92:3a:bb:53:91:b1:67:5f:4f:c6:e4:
         e6:fc:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:30:27 2025 by rpki-client