Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa
File:                     241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa (raw, json)
Hash identifier:          84d8dIMorJwlrGnPo3O44FMlcbzUuPzYi6ivr1l0pOg=
Subject key identifier:   ED:31:7B:6C:4E:D3:C0:9C:9F:76:5F:C0:6D:AA:8B:49:EB:AC:87:D2
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858483F8028BD343B4ADAC892CD00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     46835
IP address blocks:        65.51.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:28:bd:34:3b:4a:da:c8:92:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=c8708828-86dc-4474-ac47-0c8fb7b49728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:e3:e7:b8:93:8c:06:7f:92:1c:6b:78:36:
                    11:5f:d0:92:df:b3:00:41:fe:00:9f:77:db:ea:f9:
                    66:87:57:ad:0b:c9:11:09:ff:a9:6b:57:77:88:f9:
                    f8:1f:22:00:b5:fe:69:74:ad:84:28:23:7d:9e:5b:
                    5d:53:80:04:d4:c0:57:11:74:80:14:60:f6:dc:5d:
                    b8:c0:81:0d:30:50:63:27:ee:c5:ed:74:e7:af:f3:
                    b8:21:f6:ba:66:05:d2:48:ab:80:38:2f:96:d5:a8:
                    ac:76:41:c3:57:d6:9f:2a:0e:04:e1:43:e0:cd:1f:
                    4e:78:96:88:72:20:0f:28:07:28:cf:b2:a7:47:fa:
                    bf:14:75:7a:96:12:d0:5e:23:22:4a:b1:8e:49:6a:
                    65:ef:cf:4d:79:8a:e1:8f:9d:3e:bd:c1:1b:35:a9:
                    59:90:a5:28:53:34:a2:7e:0b:3b:7b:18:b8:d8:02:
                    48:08:91:f9:3c:6e:c6:c7:ac:a8:c4:44:19:44:70:
                    09:bf:da:3b:5a:5e:08:e9:68:bb:63:35:32:0f:b1:
                    e5:d9:13:4d:f9:44:77:17:f0:09:19:0c:3a:7a:cf:
                    a3:64:73:6e:28:74:58:5a:95:f0:7d:1d:6f:72:de:
                    d1:af:cd:7d:16:6a:48:08:7d:a1:35:a6:9b:0d:e7:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:7B:6C:4E:D3:C0:9C:9F:76:5F:C0:6D:AA:8B:49:EB:AC:87:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:2c:cf:56:46:24:c5:4c:a1:17:3b:d4:e6:6b:be:26:77:d1:
         b4:04:42:81:11:52:cc:a1:92:ce:0d:7a:82:8c:73:87:7e:e0:
         8d:46:ee:1f:29:eb:2f:5e:dc:da:79:0d:e9:e9:fe:d0:7f:9f:
         ce:3d:15:91:4e:9c:5d:5e:3a:c9:7e:95:73:93:14:05:28:d5:
         e0:ce:43:e9:b1:24:34:36:9c:a6:31:0b:8a:20:b2:5a:74:f9:
         12:43:97:ac:7f:14:9d:98:cf:f8:1f:37:0c:35:21:27:38:a3:
         44:9a:f6:90:ab:3f:24:15:cf:22:b0:67:d3:79:0b:31:90:e3:
         9a:1e:f0:1d:68:98:52:13:6c:77:b0:f5:03:14:4f:d4:dc:db:
         4a:66:95:68:f6:86:f9:4b:c5:2d:c9:b2:46:55:44:e2:a5:63:
         f1:f3:d3:c0:bb:85:0d:c0:11:5b:b6:fd:a5:07:ee:a1:54:24:
         7f:a3:15:96:9b:a0:1f:36:fb:c7:4b:e5:e2:a6:9b:73:9f:c9:
         ea:72:f3:5d:4d:b8:18:b1:91:5d:7a:0a:de:58:06:21:9b:c1:
         03:53:f5:49:f4:c2:e0:88:f5:4b:8a:03:22:4b:64:18:de:9c:
         42:c2:49:7b:fe:00:58:6d:c1:2b:a9:8e:be:e3:a1:4d:8d:ac:
         ee:d1:32:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:12:33 2025 by rpki-client