Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
File:                     06b897cd-c149-375a-a100-7b8ecde282a5.roa (raw, json)
Hash identifier:          Lisxq/bdpYef8+5mCc88ndlPR23sJLpsnywWvW/yWIo=
Subject key identifier:   5F:28:0C:A3:C9:34:E0:08:6A:2F:2F:70:0C:16:4F:9B:B4:68:7D:31
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285848143A7B2E3F91960A7566B800
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     13984
IP address blocks:        216.213.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7b:2e:3f:91:96:0a:75:66:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=c78b3885-c3aa-402d-8276-0e2eeef8d16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:e0:e0:56:d7:34:1a:7e:cf:ec:91:2a:fc:
                    6d:98:18:49:45:4c:5e:da:33:ef:07:00:0e:c8:6c:
                    59:2a:dc:5b:4f:18:24:96:7d:86:19:f4:18:0d:ce:
                    9c:d2:7e:89:fe:1b:c0:e0:e3:6b:ca:c3:14:4f:21:
                    8f:5e:59:1a:5c:79:f2:00:59:2b:dd:2f:48:54:b9:
                    f1:c1:8f:bc:2f:7c:85:16:8e:2f:dd:c9:92:ff:ad:
                    24:4e:1a:b2:5e:b1:5b:40:82:1c:8c:d0:df:d5:4a:
                    ca:28:14:8b:59:63:3c:ab:fa:5d:4f:ee:a4:ea:e3:
                    e6:2e:cf:a7:17:d1:05:05:53:ff:77:16:00:33:54:
                    7c:77:c7:bd:d8:66:f4:8a:b2:f1:99:1d:66:f2:ea:
                    e6:3d:89:db:d9:29:b6:a2:34:f8:70:9f:19:a3:1a:
                    8d:d6:e0:d5:71:d6:80:40:ac:24:b4:fd:d7:8f:31:
                    27:0c:4f:85:9c:6b:f8:71:ac:4e:d9:af:b0:67:d2:
                    c8:12:e9:fb:c5:18:a3:16:a3:27:38:f0:59:22:00:
                    48:6a:ca:4e:9a:f3:93:24:da:2f:f4:b4:85:82:e6:
                    b1:5d:77:64:b2:31:69:b2:17:8b:31:9d:d8:7c:ec:
                    7c:c6:e1:c2:a5:bc:19:cb:f6:3f:ad:4f:2d:f3:a7:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:28:0C:A3:C9:34:E0:08:6A:2F:2F:70:0C:16:4F:9B:B4:68:7D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:df:d7:40:35:70:a4:5e:21:e4:9c:b0:f6:b8:cd:83:4d:6d:
         f4:ef:8b:29:01:76:9f:3e:48:85:23:0a:fe:55:6c:53:49:c4:
         5a:a2:f5:87:8d:a5:3c:22:21:3a:e7:95:79:3f:be:d9:cb:a6:
         74:f1:00:db:3b:ba:c5:e0:f5:9b:e6:2d:f5:3a:ed:b7:ab:4d:
         d7:78:d6:2b:68:a0:2a:49:50:7c:9f:bc:09:a4:3d:ac:60:15:
         26:5b:71:5c:01:6a:f4:57:96:8b:9f:ab:d9:9b:bc:c3:92:d7:
         0c:a4:39:28:a6:0d:ba:39:2b:d7:ae:ea:ca:ba:9b:03:fc:87:
         c6:1b:7c:4e:77:69:84:76:35:dd:6c:f9:a3:23:93:72:de:1d:
         42:77:ff:bd:9f:fb:f2:e0:59:fe:44:87:34:22:2d:ee:b8:43:
         d9:c9:43:0d:0c:17:a7:96:2e:40:ce:7d:16:e7:07:46:e3:da:
         de:70:2a:58:69:2c:e2:b7:fd:2c:8f:95:5b:b8:0a:8b:43:fd:
         66:b0:3f:05:28:21:e4:d5:05:75:52:eb:f1:10:e8:2f:20:93:
         4f:79:66:63:5c:e0:00:7e:1f:41:70:2f:b2:be:bf:d2:5f:3c:
         38:59:34:30:eb:b6:7f:ab:e4:ad:bb:62:36:07:89:63:6f:35:
         bc:72:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:50 2025 by rpki-client