Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
File:                     3380adc5-3344-3ade-bd94-ce7bb7300997.roa (raw, json)
Hash identifier:          wWrIwVqBVYAWjVWQSrwUEvXyTGCS4u/O33jvYYb+4KU=
Subject key identifier:   B7:6E:3A:7B:9B:86:DF:1A:2F:04:BA:A6:35:D3:70:CC:A7:D4:82:6E
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584827C53529E9C5C337F482BF40
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     0
IP address blocks:        206.53.170.0/24 maxlen: 24
                          2606:a980:0:3::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:35:29:e9:c5:c3:37:f4:82:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=7b7535da-7f7d-4636-8119-e9956bd3f67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:b6:8a:f7:8f:f1:58:df:13:5d:7d:0f:a0:
                    7c:3f:94:85:05:89:0a:90:a1:81:b1:c4:0e:a8:ec:
                    14:b6:cf:8a:56:3c:65:39:b3:9f:15:0a:39:26:fb:
                    de:94:13:05:be:54:73:a4:14:8c:18:a0:09:0c:40:
                    87:d3:5c:83:d9:ac:a8:46:07:cf:4b:a5:db:b5:c4:
                    61:56:aa:65:df:a7:b0:38:fa:25:82:11:ea:0d:e8:
                    a4:4a:63:33:a3:58:a4:4a:96:81:01:2b:c4:87:c7:
                    cd:ab:a4:18:70:96:f3:b8:43:b7:25:84:19:03:f3:
                    37:33:dc:a2:b3:bd:2d:49:60:7a:39:8d:f5:22:8b:
                    82:8d:dd:2a:1b:02:27:9b:df:14:f1:d4:ed:c1:c5:
                    3e:28:a3:52:8a:2c:31:e2:a3:f1:26:67:2b:ff:11:
                    e5:f0:93:26:2c:32:c1:a3:63:93:18:b3:0e:d4:fb:
                    da:f4:2b:c6:a6:58:84:65:98:11:8a:82:a3:fb:fa:
                    d5:06:c0:a4:07:97:61:ee:4d:8b:5a:63:ff:61:db:
                    72:45:6d:26:4e:6a:56:5d:03:2d:02:63:ca:e3:77:
                    6b:d2:e0:c1:56:66:25:13:1f:ed:b8:ed:7c:b2:e6:
                    ca:c1:38:c5:4d:c9:a5:ec:d1:bc:df:ec:d1:9c:34:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:3A:7B:9B:86:DF:1A:2F:04:BA:A6:35:D3:70:CC:A7:D4:82:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.170.0/24
                IPv6:
                  2606:a980:0:3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:02:dd:5a:da:3d:08:5b:85:54:a9:3b:ae:8a:36:21:5d:b4:
         5a:11:78:02:d3:c6:52:72:21:4d:ee:0b:45:f0:6e:e1:98:a7:
         db:b6:eb:f1:13:bd:cf:fd:26:0f:55:43:a4:c2:51:25:14:28:
         06:43:9f:0a:a3:f1:7a:03:ed:c1:f2:de:54:33:e0:48:5c:af:
         12:f3:73:07:ef:f5:9a:1d:09:78:52:7d:aa:55:23:3c:c7:73:
         53:9e:cf:6d:a8:52:ee:4c:e2:6f:da:84:ba:e6:97:bd:2e:1a:
         85:a6:da:12:13:9a:1b:aa:c3:00:7c:14:fc:eb:10:d7:3b:93:
         40:a2:55:a9:68:e7:04:1c:fb:e0:78:b8:1b:6f:72:0b:2a:41:
         bc:37:41:20:12:67:b7:6c:3b:ad:0d:40:8f:f4:c3:ba:01:7a:
         62:08:dd:58:a7:c8:ee:9e:4a:47:13:1b:2a:7f:f6:08:88:d8:
         9e:30:e1:37:69:0b:8e:10:ba:82:f8:fb:53:88:63:fd:ef:b1:
         4a:78:a5:43:50:d1:84:ef:32:67:44:81:1d:ab:cc:20:4e:ba:
         5e:1c:1f:a6:d1:1c:c7:38:e4:cd:8f:20:7c:2c:81:d9:d5:db:
         c2:b5:8a:57:84:ac:96:37:0a:52:ca:e9:f7:08:8d:56:39:1f:
         96:f4:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:25 2025 by rpki-client