Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
File:                     9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa (raw, json)
Hash identifier:          MgsfI5z5FwRIxDpeqcE/dEfGdXKGNx4tAkQQiBWFTCM=
Subject key identifier:   CF:5F:B7:12:37:E4:14:7F:C3:AA:0B:F2:43:F5:89:C7:87:2E:ED:6F
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584827C5353F9A2DC8332A88E000
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     0
IP address blocks:        206.53.205.0/24 maxlen: 24
                          2606:a980:0:9::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:35:3f:9a:2d:c8:33:2a:88:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=46e10401-cc6f-4d68-a519-14494efa635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:c5:ed:18:e9:93:a0:81:e9:8d:24:35:6b:
                    a7:1f:34:2a:2c:1e:a5:7e:aa:73:74:f3:6b:4a:7c:
                    95:6b:9f:f5:46:f6:08:4b:2e:9d:ba:ad:a8:b4:20:
                    ff:f2:8c:70:87:97:23:ee:71:fc:03:af:df:4d:34:
                    17:df:fb:33:9a:ad:90:78:65:aa:5f:35:97:9c:1b:
                    fb:cd:0a:ef:b7:87:fd:7f:c4:bc:4c:1a:73:d1:0a:
                    6c:b6:21:6a:16:81:ea:4f:18:57:b8:b8:80:c5:4d:
                    e2:08:1f:13:a9:92:28:c4:ed:70:06:a1:da:51:92:
                    21:9f:e5:2b:e7:27:15:43:9d:47:f9:ae:68:1d:17:
                    e8:73:96:2c:9c:52:63:70:0e:1b:08:ce:35:6b:7d:
                    65:ee:de:3b:c6:83:d1:65:cb:8c:c0:84:01:c9:1f:
                    88:5f:d3:92:ad:3a:34:09:c9:aa:2e:39:2f:60:d0:
                    ea:45:bb:a8:27:d6:fd:68:81:d8:49:09:21:5b:48:
                    fe:02:3e:c7:93:80:26:d6:3c:75:9b:dc:23:b7:54:
                    76:2f:41:6c:22:23:5a:9c:f5:9f:ff:53:fd:00:82:
                    17:7c:ea:ac:c2:8d:f3:34:ca:5b:3d:ed:8d:03:a2:
                    b5:cb:d2:55:74:59:c7:c8:45:a0:93:3d:f3:27:4f:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5F:B7:12:37:E4:14:7F:C3:AA:0B:F2:43:F5:89:C7:87:2E:ED:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.205.0/24
                IPv6:
                  2606:a980:0:9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:23:6a:21:ef:76:d6:dd:f4:14:6e:ba:bf:1e:cd:49:e9:
         4b:c4:97:d0:32:29:8b:d0:97:0a:fb:5e:b5:cf:f6:c0:9f:f4:
         c5:49:de:75:13:c5:58:c5:85:ee:9e:34:72:33:34:7a:d1:cb:
         e4:99:63:ab:6b:3b:44:c0:38:62:f8:34:d4:ad:3c:ad:d2:84:
         8c:60:1e:ff:cd:84:94:fe:eb:be:a0:53:16:4c:7f:19:15:9d:
         0c:13:8a:e3:f9:7c:4e:ce:db:ed:8d:e1:d6:6d:c1:fc:0d:ae:
         a7:fb:3a:d6:8f:3b:2e:57:37:4c:ee:39:f2:07:e8:ac:d3:dc:
         3e:8a:c5:ed:35:71:57:fd:98:82:2a:ef:7a:6f:15:88:8f:11:
         96:de:5f:26:bc:9e:55:32:11:80:d1:07:09:36:6f:ad:46:8d:
         a6:e7:31:3a:d2:52:83:02:8a:41:fd:6a:9a:7f:b9:24:16:48:
         40:49:f1:0d:10:29:15:ff:b7:ce:9b:c5:96:8a:c2:c0:3c:dd:
         f1:3c:2a:a1:33:7d:84:aa:00:57:da:d3:1b:52:82:af:9d:c8:
         b8:99:83:af:17:4f:68:2f:35:0e:a2:4b:c4:75:49:e7:a1:fb:
         63:4f:6e:d7:7a:d0:2c:8e:c2:01:83:3c:7b:cf:a3:4f:bd:13:
         9f:bf:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:24 2025 by rpki-client