Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa
File:                     6d424af2-98af-3ea5-b716-579d6efc2b86.roa (raw, json)
Hash identifier:          K+XYWh4eTx/83oFjL9z2UovCElnPbg824J6yIGE5z38=
Subject key identifier:   25:93:5C:F3:DA:86:19:03:37:7C:73:ED:0D:2A:E3:BB:20:45:0A:A7
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F432858489A3B474489A5D4933C8DFD00
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     30687
IP address blocks:        216.38.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:47:44:89:a5:d4:93:3c:8d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=56fec91b-cf86-4d7c-b9e7-12bbc0de69c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d9:20:e7:46:18:45:b3:b1:c6:58:f4:9f:64:
                    b5:9c:66:74:47:47:93:08:8f:13:06:80:b2:53:71:
                    30:a9:23:fc:6b:39:e1:9b:43:70:2c:99:58:f4:3d:
                    10:32:60:63:14:7f:f8:65:e2:fe:10:78:91:0b:8f:
                    a8:51:18:f0:e4:e4:0a:71:89:9c:d3:eb:dc:f6:a6:
                    2f:61:5e:04:b9:c3:2c:19:d4:b7:e0:26:10:b0:d7:
                    e6:8c:b6:c6:b1:39:15:18:89:c6:e7:c4:8b:9c:4b:
                    a5:1d:bf:10:dc:31:1d:07:7e:6c:e4:87:a2:19:3f:
                    cf:cc:fa:b4:49:28:9a:dc:15:36:b7:96:10:3a:a9:
                    17:28:5c:07:a6:aa:f7:c2:57:f5:bd:af:89:b9:24:
                    59:a6:3c:f8:b7:43:85:50:49:c3:c2:37:92:62:b5:
                    77:de:d1:cf:ef:00:18:1a:9e:d1:88:7e:7a:98:d4:
                    24:bb:d9:89:5f:63:91:81:d0:be:4f:93:72:07:2a:
                    06:d7:67:cc:73:9b:a6:0f:5f:b1:f1:a6:76:44:27:
                    89:39:07:d1:65:92:e3:2e:1f:09:04:e0:71:15:e1:
                    c8:3e:9d:07:f0:ef:49:e4:a0:dc:c1:16:38:26:ac:
                    6d:cf:22:d2:f1:7c:cc:31:aa:c2:02:1e:a3:da:3b:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:5C:F3:DA:86:19:03:37:7C:73:ED:0D:2A:E3:BB:20:45:0A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a0:79:3c:19:a1:3a:50:3a:fa:69:4c:96:91:d1:97:e8:95:
         1f:c3:35:76:9d:cc:a0:00:bf:8d:46:25:31:e2:1f:2d:69:3f:
         74:3c:e5:76:1d:ef:69:0d:a4:4d:a4:2b:73:2c:08:dd:af:bf:
         01:eb:46:26:62:48:80:88:e2:ca:d3:69:59:0d:62:20:f2:29:
         13:53:9d:cc:46:0e:fb:62:42:2e:ff:22:3a:83:9d:0c:1d:ba:
         5b:7f:dc:08:96:66:33:43:d5:4e:9b:81:e3:9d:3d:5f:be:f8:
         e9:f9:ac:c0:c3:98:f0:26:5e:ea:9d:99:f0:e4:94:c8:34:bf:
         09:a1:13:f5:60:6d:9f:6c:a2:2f:e6:72:08:40:6c:82:bd:ac:
         ac:09:09:35:97:ac:f3:9a:0b:10:2e:4d:4e:f0:24:71:ec:78:
         e4:35:84:91:52:ab:75:48:c6:ea:b5:c8:71:b4:5d:72:d2:0e:
         39:ad:21:f4:21:c7:df:02:9a:2a:01:b2:ba:86:ee:b3:38:d7:
         7e:53:72:b6:8f:48:6d:26:71:03:a7:ea:34:39:8e:a7:66:00:
         4c:32:41:e4:dd:02:a0:a4:62:0f:93:71:0c:e6:a1:6e:4b:49:
         eb:a5:74:46:9a:17:fe:d7:74:14:76:99:4d:ec:08:28:eb:11:
         f2:04:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:08 2025 by rpki-client