Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/be3ee32c-4cd6-3650-99de-836b0159267e.roa
File:                     be3ee32c-4cd6-3650-99de-836b0159267e.roa (raw, json)
Hash identifier:          8nPvPa8IB3/skBvgJ3zvVh0yJZgT542ITdXeNg9BUoA=
Subject key identifier:   6E:19:AF:46:C7:67:3C:39:C8:FF:39:A6:F6:86:FE:65:27:CE:A7:82
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858484EDACDF93E1F57B634431CE2
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/be3ee32c-4cd6-3650-99de-836b0159267e.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     984
IP address blocks:        206.162.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cd:f9:3e:1f:57:b6:34:43:1c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=12a626e9-e18b-4409-92a4-744a844697cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:18:60:75:cf:c4:fc:6b:1a:26:81:6f:fe:
                    19:b4:36:2c:42:c7:d0:d4:72:8a:47:c8:57:59:5c:
                    12:a4:fc:b3:94:ca:a1:d3:a9:96:25:40:35:e6:0c:
                    f4:cf:f9:86:98:e9:1e:6e:75:e9:57:29:cb:a7:c3:
                    f7:84:22:40:06:27:b6:b4:70:37:4b:7c:f2:0a:31:
                    3a:77:63:76:8b:ef:fd:36:46:b7:32:6e:a6:57:21:
                    f0:c9:cd:a6:a5:eb:10:f7:99:ae:a7:e5:aa:e5:c5:
                    d7:39:60:b8:51:c9:ed:9c:b6:33:dd:99:ad:bc:c1:
                    7d:a8:e1:b0:43:e9:01:4e:bf:c0:ab:f7:5f:bc:12:
                    47:0a:6b:7d:3a:44:04:a0:99:92:39:7b:3b:55:9f:
                    04:fe:9f:eb:90:a8:96:68:7a:c2:6a:e1:27:40:e7:
                    44:81:95:26:75:65:69:c5:96:86:16:16:ff:ca:44:
                    70:6c:2e:2c:39:52:62:e6:c6:2c:72:db:e4:c3:2c:
                    63:22:46:ed:87:80:23:54:06:24:08:86:9a:8c:c8:
                    87:90:c8:b6:ce:ad:e5:4f:f1:bd:d5:bf:af:ff:3f:
                    38:3d:9b:2e:c6:2f:0a:a3:0b:56:72:1d:11:ab:14:
                    27:25:a3:df:b4:04:d5:7f:5f:ea:15:c4:30:bd:83:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:AF:46:C7:67:3C:39:C8:FF:39:A6:F6:86:FE:65:27:CE:A7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/be3ee32c-4cd6-3650-99de-836b0159267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:6c:f0:f7:59:0e:14:b2:14:77:fb:11:10:2c:70:80:18:
         df:4d:30:2c:67:ae:ea:7b:54:b7:a5:5e:70:f2:76:64:21:3a:
         00:40:8a:73:42:db:15:4d:07:f1:1d:b3:ca:ec:bd:a0:87:24:
         38:e7:8a:8f:59:f3:3d:64:c8:3f:4f:dc:7f:19:ec:8d:96:b1:
         a0:ff:ce:34:1c:e6:34:58:b3:1e:0a:cb:9d:a4:e4:92:fc:de:
         5c:bf:f7:32:37:77:2f:0e:2c:b0:0c:c3:90:e7:c7:37:48:13:
         a0:12:6e:c6:06:46:1c:bc:c5:31:0f:14:39:5d:8a:ae:20:94:
         4e:12:5a:80:77:12:f9:b6:cb:6d:6b:d6:94:d2:80:23:2f:aa:
         d0:30:fe:87:75:7f:6a:43:2a:76:59:da:88:19:5c:f0:93:84:
         fb:03:87:18:9a:54:9b:98:bd:9d:06:f3:87:3d:42:28:90:37:
         d0:35:ab:05:3a:07:81:21:8a:7c:7d:ab:3c:54:7c:03:33:77:
         cf:1c:a2:ea:92:ff:4e:b7:6b:53:e9:01:ee:76:62:3b:a8:b7:
         55:f9:2e:e2:d6:86:bc:ed:12:9a:31:30:31:88:20:19:93:fe:
         09:0a:3c:89:ec:1a:bf:b9:9a:09:27:9f:f1:07:48:58:bc:d9:
         9e:9a:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:24:14 2025 by rpki-client