Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa
File:                     a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa (raw, json)
Hash identifier:          SUncOFIWypR5ADbaKZxAbY3N5YlnhJhqgLBqvxPqq68=
Subject key identifier:   2A:BB:3E:CB:C2:30:32:C8:55:BC:B0:9E:E6:BF:9A:ED:74:B1:0C:6F
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F43285848222FD2296271F460437F7320
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     1273
IP address blocks:        206.128.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d2:29:62:71:f4:60:43:7f:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=9c608b84-db29-42b0-83c1-d9d4781c155d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:2b:3c:26:de:77:a9:f6:1d:fe:99:f4:c9:
                    a5:62:48:54:4d:7b:1a:75:1a:0d:ec:35:ab:84:4f:
                    41:66:fe:18:e2:a1:e2:e7:4a:56:ad:f8:07:79:4e:
                    88:56:f3:72:66:27:ec:5d:f7:f7:7d:a1:3e:49:e8:
                    cf:71:31:c4:d1:24:56:0e:b3:2a:fd:ea:d9:3a:07:
                    76:61:05:f7:29:46:af:e2:09:45:2d:ff:cc:02:0e:
                    7d:e5:4e:e2:f8:1c:9a:be:51:2f:d2:85:db:1c:18:
                    92:18:25:5c:42:f8:8a:6d:e9:d4:71:f7:4a:29:6d:
                    86:46:9d:72:2b:1a:7d:b1:b3:e7:b5:0d:94:01:c6:
                    9d:4e:63:67:75:65:97:cf:af:32:c9:e1:31:05:b6:
                    f7:7d:58:ae:0c:fa:75:8c:81:4d:65:85:fa:7e:d1:
                    0f:75:65:4f:62:7f:84:6c:92:ce:68:85:93:ec:6b:
                    52:1d:74:7f:d1:66:e2:fc:1b:0b:c9:13:09:85:28:
                    c1:a3:98:63:f7:54:a7:2c:87:d0:c6:1c:b3:1c:1c:
                    87:bc:a5:99:ab:15:a8:b3:9c:1e:a9:45:26:81:48:
                    f2:bf:5c:12:d7:8c:e8:c0:c8:c7:f9:d5:65:ff:ea:
                    d4:f5:ff:76:36:ba:bc:8d:03:c5:c0:11:05:56:ea:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:3E:CB:C2:30:32:C8:55:BC:B0:9E:E6:BF:9A:ED:74:B1:0C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:58:9a:a9:ff:9a:21:64:6a:c9:e5:94:be:ab:4a:f4:4e:
         32:03:c0:1c:ed:59:36:5b:2e:6d:df:7d:c8:37:53:03:71:73:
         53:77:b2:f4:e8:e9:13:c5:dd:ec:c5:41:63:5a:ff:e5:71:b4:
         ee:f6:47:cd:a7:09:45:1f:ae:50:d1:7f:c7:35:eb:56:03:70:
         97:27:f2:64:81:dd:c7:45:f9:8b:15:27:bd:64:88:4a:4b:42:
         17:70:6a:1d:de:59:61:63:cf:d1:60:9a:8e:d8:5c:ab:10:f8:
         e5:af:97:ea:12:6a:70:82:65:2f:cd:9b:90:1a:89:04:7b:5b:
         47:06:01:9a:be:63:75:dc:ff:e3:f2:8b:06:1e:30:26:09:90:
         3e:df:44:33:92:0a:90:dd:ac:48:f3:ba:ae:d8:e1:41:27:10:
         07:57:44:68:d7:d8:4f:5e:a0:65:4b:13:a9:59:0c:8c:e3:c5:
         ef:aa:81:dd:15:fd:7c:dd:1c:44:67:85:77:b9:78:6a:9e:8a:
         b8:56:46:9e:28:36:dc:96:71:27:3d:52:ca:80:60:f6:42:04:
         d0:7a:fd:d7:e6:08:70:41:85:ef:8a:05:8b:67:f4:bd:a2:48:
         25:94:dd:19:1f:94:86:01:b1:c8:d7:76:f1:b1:a8:a9:b9:11:
         a8:f2:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:16:11 2025 by rpki-client