Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa
File:                     44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa (raw, json)
Hash identifier:          zU09hWpTinpRn4qBQn2MwYOgVdGeWbp6INaE+YnhvLY=
Subject key identifier:   BB:EB:36:5E:91:A9:CA:20:A9:2D:9C:98:D9:5F:2C:0B:84:67:27:A4
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848037B601F392FFD184D759080
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     19961
IP address blocks:        216.255.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:60:1f:39:2f:fd:18:4d:75:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=62a37d62-8060-4bf0-8acf-a0115d2735a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:27:e1:f3:b0:d7:52:31:0a:57:37:a8:98:
                    10:69:51:4b:19:ec:ff:bb:6d:ce:c6:83:19:86:25:
                    98:5a:96:39:d2:3a:0e:f4:82:1d:58:d3:3c:56:be:
                    69:06:1f:41:fc:e1:49:d8:77:7b:f5:17:f9:99:e1:
                    e6:f6:f0:7e:2f:2d:67:f8:3a:22:46:65:18:0c:93:
                    00:20:39:a1:50:13:8f:ea:1e:1b:66:21:e3:ac:50:
                    41:56:7a:ec:3b:0b:fa:ee:6e:5c:c0:a6:af:63:5d:
                    a2:06:e2:a3:d6:c1:05:bb:2a:0a:64:c1:d5:b1:c9:
                    93:a5:42:cc:50:68:d1:33:32:e4:a4:19:0a:9b:1e:
                    78:4c:46:80:cf:f4:cf:6d:09:98:ec:34:a1:60:0f:
                    52:68:29:a6:37:0d:93:fb:b9:47:aa:05:5c:1f:a1:
                    28:03:41:df:9f:f9:ae:09:ee:de:ac:7c:22:43:02:
                    cb:5a:46:d6:0b:b0:ad:a7:8e:00:8a:ae:ba:9e:21:
                    98:3e:c4:08:b3:fa:1b:fa:bc:40:6e:b8:04:17:27:
                    ee:ef:e0:07:69:e3:22:7b:f0:3e:83:cb:57:ad:62:
                    a9:d2:44:3d:7d:ee:8c:cb:65:c9:4c:4d:9c:6d:a6:
                    2c:b8:0b:12:2f:18:43:95:c5:04:3e:80:05:51:8c:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EB:36:5E:91:A9:CA:20:A9:2D:9C:98:D9:5F:2C:0B:84:67:27:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:85:c8:59:46:f3:b6:16:ef:37:03:7c:d0:69:07:5e:d6:
         ed:b9:15:3f:dd:0a:a9:bb:c4:82:87:e1:5c:6b:b8:16:51:f9:
         86:38:cc:06:48:6c:b3:7c:e2:e4:99:6d:06:98:e7:1a:d8:58:
         fb:ba:4c:23:3e:f5:0d:4e:eb:c8:8d:67:08:7d:d2:4e:06:e3:
         1e:06:30:ba:e3:11:a9:67:03:32:fb:71:31:74:58:64:ce:13:
         55:2e:16:d3:57:7f:ca:b8:a1:e4:1b:51:10:84:4e:42:33:8f:
         a0:3d:21:9a:fb:8d:30:3a:46:51:c6:01:3f:18:fe:82:63:ab:
         34:03:06:00:d1:30:d7:47:79:54:ff:7f:e3:a1:53:5d:55:f6:
         47:f6:a9:07:a5:46:e9:f7:0f:dc:df:d2:76:49:95:2f:90:f5:
         5b:10:ee:97:eb:50:2a:18:0e:eb:b2:93:b3:c7:55:e2:17:a4:
         85:4a:26:94:a4:66:1f:d0:e4:ff:a0:fb:c5:6f:e2:63:bc:54:
         2c:74:79:9c:c6:e5:5a:28:74:9b:53:98:ee:75:d0:7e:9f:fc:
         da:14:0a:b5:48:ba:15:21:26:8e:25:4c:e4:fa:0a:38:b0:f0:
         28:fb:08:e5:f4:73:3f:53:16:76:c2:e2:5a:11:69:5d:45:f3:
         a4:15:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:30:51 2025 by rpki-client