Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa
File:                     bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa (raw, json)
Hash identifier:          S62LnsfIg51kCu9FaVCDa2VxYCnpytryTWMt+u+CCWM=
Subject key identifier:   8E:E0:21:0A:8B:73:0E:91:CC:B5:C7:CC:28:D5:09:AA:1C:08:11:D8
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F432858482A8FDEB12E6FD5CEBB81D600
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     43181
IP address blocks:        168.245.216.0/21 maxlen: 24
                          208.56.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:de:b1:2e:6f:d5:ce:bb:81:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=21030653-998c-434b-af74-5d0d167e5f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:4c:fd:aa:a8:8b:49:0d:7e:b9:6e:f5:1c:
                    ca:5c:8d:db:a9:d4:0c:49:d6:09:b8:5a:5c:a8:76:
                    4e:97:4c:99:21:4b:91:45:10:b4:22:95:37:0e:ed:
                    9d:3b:00:01:0a:24:ac:7f:33:c8:e9:91:90:79:ec:
                    d2:84:a3:7a:1c:b6:30:da:56:a4:d9:60:b7:84:92:
                    3f:6c:9b:39:3f:ee:cf:f4:4f:9d:91:86:9e:72:6c:
                    5d:ec:76:e7:c2:a7:bb:32:c3:8d:dc:b0:fc:50:90:
                    56:8e:91:d4:53:43:96:ae:73:90:75:0c:73:34:81:
                    6d:f9:a6:fd:c9:7b:2d:7d:da:6c:e8:b5:7c:39:ae:
                    4a:7f:22:39:dc:65:13:e0:e5:17:49:e6:52:94:ba:
                    f6:ef:cb:25:66:f3:b6:8f:42:73:19:1d:5a:9a:ed:
                    b5:94:07:c3:93:37:92:70:bf:28:3f:b1:86:21:59:
                    4a:f0:ae:32:e0:42:a0:21:b0:fd:8b:66:ab:9f:95:
                    40:36:b6:1d:66:1f:f9:31:a5:29:29:1a:33:65:bd:
                    4e:6c:95:99:9a:c1:7d:79:e7:d1:d7:dd:f5:4b:61:
                    5b:42:74:22:43:67:de:f9:62:f5:61:3e:f3:12:70:
                    77:c8:be:8d:51:fa:58:6c:b3:bf:aa:12:63:c2:a7:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:21:0A:8B:73:0E:91:CC:B5:C7:CC:28:D5:09:AA:1C:08:11:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:ee:ad:cb:93:ed:ec:dc:e5:89:17:c6:e5:4b:a2:36:2d:
         43:4b:aa:94:d9:a9:3f:d9:de:70:87:20:43:bf:7a:c5:63:0a:
         06:c1:4c:09:ad:6b:a8:07:80:b6:b2:53:cf:95:de:61:d6:1a:
         03:d5:31:37:69:34:16:7c:7b:3b:99:63:74:a1:f3:b4:57:3d:
         d0:68:5f:1f:c7:94:c3:eb:d1:a9:7d:d4:0e:4e:e0:18:98:b1:
         18:4a:5b:f9:5f:3f:8f:bd:0b:f3:de:54:7d:5a:cb:f2:b8:96:
         6b:7d:68:87:62:91:5f:04:6c:fe:6a:b5:b3:2f:9a:86:74:23:
         fe:d8:22:3b:c3:d2:52:db:7f:65:4e:b0:e3:0c:9c:a5:a6:59:
         63:a3:52:3e:4c:4f:6e:11:2c:89:85:6b:15:ee:a4:77:99:89:
         e1:12:1b:89:22:2c:5a:78:9c:9c:0d:33:eb:99:05:c6:d6:74:
         1e:09:16:5e:58:eb:39:ed:bd:f5:6a:f5:19:a5:eb:5b:4e:00:
         c1:3a:db:16:80:4f:4b:f3:9c:1b:48:95:23:3d:c6:71:b1:5b:
         c6:48:4d:72:cd:57:63:53:eb:73:d8:20:84:ed:25:e0:6c:40:
         08:4e:85:c5:24:1f:55:5e:a4:ef:3f:c1:3a:57:2d:ca:13:04:
         7e:18:90:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:08 2025 by rpki-client