Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
File:                     ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa (raw, json)
Hash identifier:          wsQ/Z9SXbnvPNGu1W/dFdExNI7nP9FNxnOxoDrF6rsY=
Subject key identifier:   DF:D1:6E:3C:93:2A:BA:86:20:7C:94:0B:1A:C8:E7:C4:89:C4:18:8F
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584824FA8C66579939A6E8ED5DB0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     399629
IP address blocks:        67.217.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:8c:66:57:99:39:a6:e8:ed:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=830e880e-ca58-49a4-b358-17eaf02cee57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:fd:8c:4a:a2:51:51:1b:59:3a:73:60:ee:
                    23:86:2d:dc:2c:44:ef:de:bd:fd:68:1d:39:30:db:
                    61:ad:d2:01:7d:8b:4d:80:02:db:35:6b:e6:6a:5d:
                    ae:2d:d8:11:4e:ef:b1:77:e0:60:81:f4:a0:68:c9:
                    8c:fd:7e:c6:6f:0c:dd:8f:f0:00:4d:2e:c4:91:23:
                    ef:bd:d7:24:e9:d5:6d:56:fa:55:f7:bc:6c:61:d9:
                    6d:bc:1e:37:88:48:ec:95:67:d6:87:f8:53:83:1c:
                    84:6d:83:4c:27:d9:76:ec:4c:28:f3:e8:e2:73:7a:
                    44:c9:5c:0c:10:f0:e6:bc:3a:1a:1e:b8:31:29:26:
                    61:15:23:aa:c6:9a:91:0a:2c:3a:c8:be:ce:55:1b:
                    ed:cc:85:84:23:69:de:9c:b7:4e:e2:fe:18:57:b9:
                    a8:c8:2b:e4:17:73:09:1a:46:36:96:6d:2a:7d:ef:
                    21:67:c4:20:8a:38:89:8b:6d:65:24:27:1a:88:88:
                    ac:c7:de:d7:e9:b4:41:40:3e:3d:de:d1:de:dd:32:
                    2e:3c:99:98:65:8f:e0:87:23:40:55:8a:35:1a:9a:
                    ee:6d:dc:ff:c3:3c:ee:ad:27:ce:5e:51:fc:34:65:
                    78:fc:32:53:f9:7d:57:77:bc:f9:50:59:fc:e8:4c:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:6E:3C:93:2A:BA:86:20:7C:94:0B:1A:C8:E7:C4:89:C4:18:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:e9:c5:11:cc:f2:ef:00:96:1b:8c:58:eb:7a:8b:84:35:
         6f:15:df:c7:cb:ab:79:3b:d6:39:be:ec:9e:16:e2:3d:0a:97:
         b9:79:8b:fd:96:69:3f:ae:2a:9a:29:7e:af:1c:d8:72:75:0d:
         ce:c3:a9:bd:ee:c3:61:ee:b2:9a:88:98:a0:0b:61:2f:45:6c:
         02:c3:fc:ee:4a:30:c1:5d:54:89:00:f3:63:dd:37:91:fd:cf:
         52:37:67:ad:16:f7:bb:87:87:7b:41:1d:25:c9:a3:6c:04:49:
         7b:14:22:87:d4:26:87:b6:3a:36:46:74:3d:41:1c:85:9f:cf:
         d4:39:3c:71:5e:50:7c:76:f4:0b:d0:41:57:89:bd:90:fc:5a:
         3d:60:1f:1d:39:97:29:21:93:21:a2:a7:f1:4f:63:12:97:20:
         bc:f6:80:13:60:25:78:f1:f4:9b:fc:35:1b:c3:12:ce:ea:32:
         41:74:b8:21:cd:88:a3:9d:9f:1b:56:bc:4e:94:94:98:56:0c:
         9a:2a:55:74:8a:87:fa:8e:de:23:95:0d:2d:3e:3e:79:7d:b1:
         85:4f:59:f9:b0:12:7d:88:db:0b:1d:c1:0f:68:24:59:ca:05:
         85:e0:5e:19:ab:6b:03:ac:cf:a0:74:6d:a8:46:01:d7:89:45:
         31:85:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:51 2025 by rpki-client