Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa
File:                     dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa (raw, json)
Hash identifier:          yKXJAQUv43MTSej68Z/h58n4/0V4STkwAZvoE1JaSVc=
Subject key identifier:   84:97:F2:2F:27:C5:C7:2F:39:EB:D6:90:BF:C5:0A:23:53:BA:20:4F
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F43285848222FDC0D094BE7AC88274780
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     1273
IP address blocks:        206.24.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:dc:0d:09:4b:e7:ac:88:27:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=674ff1f6-b07c-43bb-a5a1-caab7477e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:76:78:f5:2b:9f:21:26:a8:1d:93:9d:a1:54:
                    9c:f6:71:0d:aa:e6:eb:57:18:2b:47:69:ae:71:41:
                    cc:6b:17:e5:42:99:81:7a:ce:85:70:8a:e6:a5:6f:
                    29:5e:00:9e:b5:ec:0c:12:2f:58:90:4b:21:44:06:
                    e9:f9:9d:4b:ff:e6:19:53:44:8b:ed:c5:df:2a:1f:
                    8a:41:93:1d:ad:60:6e:6a:5d:db:e5:72:72:17:b6:
                    31:db:7a:a2:67:2d:52:ec:07:8e:f8:fb:73:26:26:
                    7b:e1:70:cb:4d:21:0c:e1:b6:c2:1b:43:51:09:61:
                    82:48:b8:fd:a6:b8:c4:19:40:f4:f5:c2:58:78:d9:
                    bb:da:7b:74:d0:49:e7:e9:b4:0b:bb:06:f0:d6:26:
                    e4:83:01:39:d4:ad:f5:67:30:57:fc:e5:f7:a6:97:
                    46:35:21:d3:c2:ac:a4:67:98:24:38:2a:66:87:59:
                    92:93:53:92:6f:6c:6a:c2:32:34:a8:5c:4c:64:d2:
                    7f:eb:dc:77:d9:c1:a7:d8:db:b4:f5:2c:bc:a5:c8:
                    dd:ea:a6:25:27:25:07:ef:3d:28:ae:45:4b:68:80:
                    48:d5:80:88:ee:a4:16:dc:ec:36:f3:58:63:48:73:
                    6f:d1:fa:cb:a2:f3:6e:d9:35:9c:94:24:64:2f:13:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:97:F2:2F:27:C5:C7:2F:39:EB:D6:90:BF:C5:0A:23:53:BA:20:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.24.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:1a:35:dc:71:cf:b7:a7:7c:5d:4c:2a:d9:fe:a3:62:a5:
         57:8a:01:b2:bd:ed:f8:46:43:0a:b7:6d:d3:b1:05:4b:c1:c3:
         11:ee:b7:97:27:a6:af:93:38:0c:cc:da:b2:44:f5:0c:cb:05:
         bd:83:e6:7d:ce:65:9e:74:94:3b:ef:78:1a:8b:3f:31:e2:a4:
         d2:67:04:00:a4:c4:68:7d:bc:3e:78:43:89:23:ec:91:88:bb:
         3e:47:82:54:5b:7a:61:58:63:74:2c:2e:10:d6:53:23:b4:c3:
         5e:e3:d4:83:7e:9b:e4:d2:41:0f:2a:4d:71:5d:bb:8e:8b:b2:
         80:67:55:cc:4f:20:92:fd:04:c5:b9:94:27:09:72:99:7b:df:
         82:0f:44:3b:c6:cb:75:e9:aa:e3:32:74:c2:c5:8c:7e:2a:99:
         4b:7a:35:18:28:4e:a4:20:87:74:35:d8:6a:24:1c:53:5e:87:
         05:0b:42:db:32:86:d8:ea:19:9c:f1:f3:51:60:52:0e:63:0c:
         6a:c8:5b:e8:3e:b6:cd:e7:91:a1:2a:87:40:67:8e:8f:ed:74:
         c2:74:fd:0d:52:88:5c:b4:ea:a4:1e:25:0c:41:e8:7d:f6:54:
         60:be:34:64:a9:9b:3d:41:48:0a:e9:90:5a:c4:fd:6b:12:13:
         22:cb:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:13 2025 by rpki-client