Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa
File:                     0ab997a0-9032-3aab-a0c8-de89d4870675.roa (raw, json)
Hash identifier:          +LRTR2GTWDXgR+K7VW2zzuxrBobXMjni3OHiqTnkoe4=
Subject key identifier:   F5:76:E1:62:1B:55:22:2F:82:04:BE:2D:F8:6B:F6:6D:0D:5D:64:BE
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F432858481C9A7C3A2E72300FACE91080
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     18726
IP address blocks:        206.55.100.0/22 maxlen: 24
                          208.89.40.0/21 maxlen: 24
                          2620:133:c000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7c:3a:2e:72:30:0f:ac:e9:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=16875326-2a4d-4912-972c-742c0f5cc5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:a5:61:96:10:38:eb:fc:eb:e4:69:33:ef:
                    56:af:4b:78:19:8a:38:d8:35:32:ac:2c:bd:95:29:
                    a5:71:a6:a5:ef:ad:d9:8e:af:9d:3d:75:a9:17:af:
                    ca:51:93:4e:99:02:ec:fd:01:95:c1:3d:6c:fc:17:
                    cd:27:8b:f7:fb:92:e6:db:d7:86:49:76:4a:f4:e9:
                    2f:44:52:b8:6a:1c:f7:7d:76:b1:f5:82:e1:91:dc:
                    bf:9a:55:13:5d:82:d4:aa:35:a8:c3:9c:ee:b6:b2:
                    81:e8:b8:c4:69:b5:c2:61:91:b0:f9:4d:e1:5c:71:
                    ac:e6:28:1a:e8:32:3e:d1:e9:f4:ef:5a:e0:77:04:
                    90:1d:15:dd:a3:3f:a1:d3:77:b3:71:75:21:96:6b:
                    15:f8:44:bf:85:aa:3b:35:eb:75:64:13:ad:75:63:
                    32:08:5a:08:d5:e7:dd:54:d0:70:01:07:3d:e3:95:
                    26:95:c2:87:5c:dd:3d:c8:de:5a:47:bf:a6:5e:f2:
                    37:4a:c8:77:31:7f:26:47:d4:29:b2:6b:ed:8b:70:
                    3c:d5:8c:f5:7d:37:8c:69:da:b4:6e:3c:95:c0:83:
                    9e:dd:b7:2f:af:1f:d6:55:63:df:f6:01:2d:ee:79:
                    43:52:03:fc:f3:15:37:fa:f4:70:d7:fb:49:9d:e2:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:76:E1:62:1B:55:22:2F:82:04:BE:2D:F8:6B:F6:6D:0D:5D:64:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.100.0/22
                  208.89.40.0/21
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:f3:8b:54:14:97:01:cb:a5:65:9e:e9:50:c8:df:97:22:ad:
         c6:d0:e4:32:39:ba:f0:59:b2:99:ef:21:20:25:b2:8d:3a:55:
         14:0f:a1:2c:9e:7e:1b:80:ec:a3:c5:9c:66:8f:59:6e:6f:41:
         de:8a:03:6b:6f:42:0d:32:47:51:23:53:19:27:d4:c4:9c:ad:
         4f:f7:ef:f5:ca:55:9b:8e:39:98:99:43:78:01:53:3c:ce:98:
         2a:72:db:76:27:21:c4:52:fe:8c:7a:0e:d6:5f:4a:aa:bd:4f:
         57:ea:0b:de:32:e4:00:32:85:fe:c0:a0:a8:61:7f:fc:87:33:
         fc:bd:97:c9:27:85:18:9d:60:4a:11:7e:5b:a3:8c:7d:28:25:
         56:fe:2a:97:80:2b:74:84:4e:e2:cd:cc:6e:45:56:b1:8b:36:
         02:15:6d:8a:d1:0f:69:9f:3c:c3:3c:10:0c:d1:81:9a:6e:fe:
         e1:91:13:b4:70:df:41:9c:65:7c:57:b7:f3:1e:16:f0:aa:70:
         39:5b:9d:5c:58:5d:7b:1f:cf:8b:fb:15:4f:c3:39:23:a1:4e:
         57:cf:f8:7c:32:b2:a3:35:a8:a7:15:c2:d5:ad:c7:23:fb:ea:
         5a:b7:7a:6e:e1:ba:a6:5a:d1:38:fe:33:0a:32:c9:e8:df:fd:
         8d:19:05:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:29 2025 by rpki-client