Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa
File:                     7142886a-d024-318c-bd7a-3afb8a3f2424.roa (raw, json)
Hash identifier:          zJsG2oF9gf85tMhSvDrtDQ+O5L/2OMtyG5Bik7SiW9c=
Subject key identifier:   8F:BD:B6:66:65:71:FF:3A:0A:61:81:E7:6B:66:55:63:B6:9E:8E:36
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858482EC00D78406AE1D4A6D74380
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     54004
IP address blocks:        24.246.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0d:78:40:6a:e1:d4:a6:d7:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=d8d4bcc5-ec49-4774-b4aa-9685e14a3c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:8c:bb:58:fc:84:03:ac:81:86:af:b0:d0:
                    fc:a2:4c:56:84:63:2c:a8:62:ba:5b:e4:c1:29:2a:
                    0f:f1:ee:69:86:71:4c:af:55:dc:7f:f9:68:c7:d8:
                    a1:5f:38:af:31:35:8e:06:06:37:23:46:69:3a:cf:
                    7e:40:41:d9:69:8d:39:46:8f:d9:69:e3:b4:69:89:
                    df:d4:70:26:9b:c6:cd:d0:11:0b:e0:78:fb:92:df:
                    dd:f8:f5:e7:df:77:1b:69:d0:cb:1f:3f:94:42:40:
                    32:5e:08:55:43:3a:69:5b:28:f2:6e:8c:dc:fe:68:
                    17:01:1d:7a:8f:27:0a:56:d4:67:39:e3:44:5f:94:
                    0f:21:61:43:fc:5c:39:28:dd:a0:a3:e2:57:d2:23:
                    5b:dc:49:a5:d1:7c:8c:8d:bf:c9:ba:3e:59:81:e3:
                    de:90:b9:62:32:54:54:a8:8d:f8:66:e1:50:a2:49:
                    b4:89:68:a3:ea:d2:75:e0:3a:e7:8b:7a:fe:a5:fc:
                    cb:01:84:11:22:f4:4d:94:b7:27:5b:b8:88:4d:2b:
                    da:e4:7c:35:d8:4d:47:2a:77:5a:c5:dc:aa:e5:6c:
                    f6:c9:a1:42:cd:03:93:81:68:e8:07:12:b8:00:70:
                    fc:ef:a3:30:68:5e:16:3d:47:ba:22:10:93:8f:1d:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:B6:66:65:71:FF:3A:0A:61:81:E7:6B:66:55:63:B6:9E:8E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:24:10:5e:91:ce:c6:e1:22:9b:32:2d:9d:fd:a5:d1:a5:
         88:44:0d:d9:3b:ae:d3:62:a1:56:f0:be:69:40:01:35:42:ca:
         d6:99:dd:1a:95:9b:53:1f:32:90:75:f3:1d:83:60:c4:bc:52:
         30:b3:fe:53:fd:1f:18:5f:7d:66:cb:74:5f:20:ce:4c:37:9a:
         a7:95:a1:b3:92:b4:ff:b4:4d:ce:ad:1b:02:68:d7:e9:65:b1:
         92:d5:31:53:75:db:40:59:36:b4:af:d7:8a:33:72:85:d3:1f:
         36:84:b3:7c:ea:d0:34:29:d4:d5:8d:84:15:ee:2b:66:be:57:
         0c:86:64:5e:ac:55:c5:35:eb:17:c6:a8:4c:b6:af:2d:cf:32:
         c1:8d:47:71:f2:af:79:ef:d3:58:35:c5:08:7d:80:24:ae:e4:
         e6:87:9b:31:09:c4:e9:a9:bf:9b:80:ef:93:f3:df:b8:43:7e:
         48:59:a4:b8:30:d1:f5:8f:8f:30:86:2f:59:46:9b:18:99:36:
         8d:25:69:70:21:85:44:c5:59:8b:d9:8d:b7:6e:7b:9a:57:50:
         20:d7:51:27:41:c1:e4:13:38:a8:b0:85:df:ed:62:d5:dc:29:
         ee:77:43:ba:53:9f:1c:6c:8b:aa:3d:0b:61:54:e1:2f:e5:ac:
         ca:a9:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:31 2025 by rpki-client