Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa
File:                     2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa (raw, json)
Hash identifier:          cbYFOLBO4FQHuExQmwrbr6kZEn7mB2kYWp62NnsMlOY=
Subject key identifier:   84:83:7A:25:05:57:ED:A0:B8:96:94:AD:64:01:51:51:96:BD:5E:FE
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F432858487B85B06076EA637CDC4D8F40
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        170.200.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b0:60:76:ea:63:7c:dc:4d:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=5e4901a9-10be-4b4e-b16c-2fe086ddcead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:ac:fe:72:d8:16:27:20:28:90:6c:df:40:
                    91:51:14:9c:33:e8:40:5c:4a:cd:74:c5:9d:84:16:
                    ac:a0:34:c1:cf:4f:83:69:e6:a9:54:6d:45:f6:8e:
                    fa:02:1e:b3:ad:6c:d2:56:55:3e:e7:71:2e:fe:9c:
                    0a:1b:ab:16:0a:38:f7:6c:ff:9d:80:14:a4:46:0b:
                    87:d0:77:b4:25:fd:3d:e4:a1:da:a9:2f:f8:fd:29:
                    56:52:2c:5e:52:d2:d1:dc:0b:16:5d:55:4d:24:01:
                    83:c3:b1:3c:f0:a9:a2:76:33:de:36:1c:ef:84:64:
                    51:a2:db:49:d7:87:7c:46:37:8a:a6:bf:58:3f:5e:
                    0e:c0:29:60:fe:53:85:81:7f:51:a1:8f:00:d9:45:
                    b2:93:1c:eb:ad:92:c2:26:f4:17:64:dd:31:55:d9:
                    f9:d6:a1:1a:bf:35:e1:44:bb:3b:d9:3b:f5:9b:4c:
                    74:b3:e6:24:c1:91:cb:bb:6f:fa:c0:83:48:79:19:
                    85:02:dc:16:7a:4a:5c:86:6d:48:7f:a4:1a:06:23:
                    aa:2c:ef:48:b9:ed:06:b7:51:c2:7f:f2:6f:8a:ab:
                    87:f9:ea:f6:14:e7:05:88:87:45:fd:e5:df:1a:01:
                    68:8d:cc:77:5e:e8:5a:10:6f:39:1b:61:47:13:07:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:7A:25:05:57:ED:A0:B8:96:94:AD:64:01:51:51:96:BD:5E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:43:ad:59:72:b0:49:bb:04:77:d7:bb:1e:73:21:1b:e0:
         cf:6b:ab:a3:d0:4c:9a:69:57:ff:aa:bd:51:f9:e1:b6:8f:cb:
         60:b8:f5:1e:5f:6e:79:0b:ff:ad:0f:00:2b:1c:33:ff:4a:c3:
         28:8b:8f:36:fd:db:56:2b:0b:ea:7f:17:de:fd:a6:62:48:c5:
         ac:2c:fa:7a:cf:3d:e2:e9:1a:fc:30:ce:00:88:9e:be:5e:6d:
         6b:37:b5:a4:fa:1c:5c:35:a0:bb:7f:61:24:ae:17:dd:ec:bc:
         15:d5:20:d6:d8:7c:7f:c7:bc:1c:80:0f:cc:72:b7:aa:64:18:
         1e:15:16:58:a0:bd:06:7c:34:33:fa:15:76:33:b4:47:b5:26:
         f1:ab:bd:87:e2:2d:33:fa:39:11:a0:20:82:64:c2:49:42:2b:
         9e:fe:3a:46:bf:44:03:1c:36:ab:0a:8a:15:4b:17:3a:24:5e:
         f0:21:6d:17:f4:be:ed:86:d3:c1:2c:db:a8:8b:b8:2c:cd:0e:
         3e:a9:7d:18:21:04:90:01:06:d9:1a:66:7a:3e:25:c1:10:11:
         9b:0b:a6:98:40:de:df:43:d4:7f:4c:1a:be:40:5f:ff:95:cf:
         f4:19:a7:2e:a7:38:a6:27:3e:a7:1e:2a:0c:f6:37:e5:37:c4:
         3b:75:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:04 2025 by rpki-client