Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
File:                     fb331c26-4b64-3e7c-99a6-74c206aa3828.roa (raw, json)
Hash identifier:          CPNRyEhRJq/8bW9Ia8FQzlXCNVNFuQ4I3yqT2eah7VY=
Subject key identifier:   E0:1B:F1:43:02:3F:94:C1:9E:02:22:D6:67:C9:01:CE:FB:04:15:41
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858480215097F1D90D15198F8B6C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     211440
IP address blocks:        65.110.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:09:7f:1d:90:d1:51:98:f8:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=23cdbf79-f9d7-4c67-a696-bd8f9d064875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:13:0d:2e:2e:4a:78:a7:af:a9:5a:f5:f7:
                    e6:41:26:e0:99:73:61:d2:ce:17:39:78:37:94:5d:
                    06:f2:d2:a3:c3:f6:ca:85:77:eb:18:3a:ea:c7:b9:
                    1a:59:82:f3:55:b2:8a:12:5a:ec:8b:69:e4:c3:db:
                    fa:df:32:16:46:9e:a7:62:d1:84:69:ca:9f:06:a3:
                    c5:b6:41:fd:4a:4e:75:ae:97:c6:39:2c:d1:93:dc:
                    69:ed:29:aa:31:8c:7f:57:fa:99:9a:7c:6b:ae:a8:
                    1f:90:b3:9c:97:79:e9:85:c2:ab:e6:6e:44:a4:33:
                    3e:91:81:cc:da:6d:d6:93:98:f7:9f:11:be:84:5f:
                    68:46:3c:98:c9:3d:c7:51:85:ca:6c:e5:bf:7e:4c:
                    85:7f:1d:5a:33:ae:1a:5e:b3:b8:72:d4:ed:5a:06:
                    70:39:48:7c:aa:4a:a3:0d:4c:6a:dc:8c:6e:11:1d:
                    3b:9f:80:95:0a:28:fe:bf:a3:b1:df:35:d2:88:61:
                    05:55:ad:07:c7:05:99:e8:6e:d0:16:fe:10:2d:66:
                    cd:f6:9f:8d:56:7a:8b:86:1d:c3:5c:72:8d:6d:de:
                    64:a0:6a:68:2e:19:cc:58:71:d7:8f:b4:96:a9:c4:
                    d2:a0:ee:0c:b8:ad:2f:7d:78:1b:e5:0e:46:a1:7e:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:F1:43:02:3F:94:C1:9E:02:22:D6:67:C9:01:CE:FB:04:15:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:5d:10:f9:9e:5b:9b:7a:13:94:14:b9:41:82:2b:49:83:
         4a:26:30:df:0f:10:05:26:84:fb:62:3c:dd:a2:c8:01:12:6c:
         9b:6f:bc:7b:c7:49:9e:8e:7e:43:3d:dd:d1:85:95:93:c9:26:
         c7:e0:1c:2e:c7:a2:74:b4:e5:88:68:02:90:a9:26:d9:e7:0e:
         73:ca:91:48:9c:0a:2b:4f:f9:fe:80:ab:dc:0d:2b:13:49:1e:
         74:18:ea:5a:03:70:2e:51:72:4d:48:b6:83:93:00:59:8f:45:
         a7:c3:0a:eb:8e:1d:78:27:ec:b3:ec:33:19:ae:88:6b:06:f2:
         46:b8:0d:d6:da:f5:0a:c3:7f:5d:5c:4d:a6:9b:bc:40:03:ad:
         b1:e3:f3:94:cb:75:72:3e:7c:e3:c7:cd:ad:0a:be:ee:22:31:
         61:7b:06:be:2d:84:b2:92:4a:e4:95:48:43:71:07:e4:07:84:
         e6:5a:17:68:16:59:3f:6f:f2:ca:2b:33:aa:24:52:72:b4:d5:
         7f:ad:6a:0a:3d:ad:35:1b:63:24:76:78:92:87:5e:68:48:96:
         c6:99:11:14:55:50:ac:26:90:50:fd:48:8d:2b:77:5f:f5:9b:
         f7:e2:fe:2c:71:ed:78:b5:16:cc:65:dc:81:0f:6a:46:b8:94:
         94:61:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:53 2025 by rpki-client