Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa
File:                     76c78763-08db-3cb1-83e6-92f1b41f1c91.roa (raw, json)
Hash identifier:          ZRdQL2G7RQQrTgjM1dgEwbPnOUYSXOpnSifU5eG36eo=
Subject key identifier:   B3:AB:FF:09:6F:A0:D8:E1:5F:3E:5C:94:52:63:FF:8B:CF:24:67:72
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F432858484945644FD4A98DDAE4EA1960
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     14297
IP address blocks:        206.201.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:64:4f:d4:a9:8d:da:e4:ea:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=092ce8e7-ddeb-4bae-8168-1d54a8bf111a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:e3:8b:76:ad:41:f7:b1:7d:00:3b:85:61:
                    fa:6c:ce:a1:68:4f:d4:ce:a4:d6:f8:5c:f9:24:49:
                    71:16:61:ac:b3:92:67:59:1e:d6:10:58:e0:5c:d0:
                    94:37:f0:27:70:e9:8b:a7:13:e0:4e:5d:24:6c:6c:
                    a7:05:49:40:5a:4b:d5:6c:76:06:0a:42:02:90:d1:
                    c9:f2:e5:c2:d1:37:e8:c7:b7:56:74:cc:3d:70:94:
                    87:e4:28:75:8b:ff:af:1b:1d:5f:20:c7:a4:9b:d9:
                    c9:0b:fa:f5:0e:8e:99:0c:84:c1:fa:ed:2e:fd:ca:
                    39:a3:e2:20:20:b9:80:02:85:10:89:8b:4f:22:ed:
                    69:a0:74:2e:7d:2b:42:90:60:6f:63:47:39:3c:e0:
                    b4:fa:d9:84:4d:77:db:93:72:b0:c7:27:50:6a:01:
                    94:b8:7e:df:a8:b6:c2:fe:b0:3c:6e:cf:4c:f7:ff:
                    df:f7:39:f8:be:de:06:cf:08:49:a7:a2:ab:c0:4d:
                    d0:26:9f:19:37:2c:f2:f3:09:c4:8c:5f:95:e9:88:
                    df:c5:83:64:7e:55:c8:74:48:a8:2f:68:4a:5b:2d:
                    ee:ff:f3:04:15:3b:2c:e7:7d:54:97:d8:e3:65:db:
                    9d:38:22:4a:96:0b:48:92:9e:41:cd:7c:bb:50:1c:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:FF:09:6F:A0:D8:E1:5F:3E:5C:94:52:63:FF:8B:CF:24:67:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3f:68:84:ed:76:1e:fe:74:0b:a9:34:a3:50:08:fe:6a:22:
         0a:05:ea:95:81:dc:4f:f5:70:86:e1:a3:cd:04:d3:15:9e:d5:
         48:da:01:47:20:13:65:db:a1:dc:cc:f8:b6:d6:c2:89:32:4c:
         65:e1:39:6b:8f:ef:df:23:e6:fb:da:2b:f5:f9:06:9a:a8:2d:
         5e:46:c8:12:b7:90:d8:8b:72:f3:17:fd:2d:65:44:cb:3f:fb:
         1a:ba:90:36:50:f9:5b:71:d6:eb:cc:36:53:4d:35:fd:a0:a9:
         87:81:e1:84:49:ed:ce:37:58:ba:eb:b5:58:03:58:93:80:a0:
         87:14:c2:06:41:65:3b:6e:d4:7f:f4:5e:90:9d:0b:da:93:3c:
         16:ff:d8:db:0c:2f:20:77:b8:74:33:d2:c9:c1:f8:d3:de:3f:
         bb:bf:3b:b4:d8:79:d1:40:8d:ae:05:c9:7e:c7:b5:f5:59:85:
         92:27:a0:8e:d9:e4:dc:a3:97:07:79:71:1b:4e:f9:47:41:8f:
         08:17:b8:e2:d0:65:13:08:23:76:54:e9:a0:6c:a9:e3:db:63:
         a7:80:97:97:16:47:06:8b:be:1c:8f:6c:80:4e:a0:fc:83:2d:
         e5:3d:1a:e7:86:1a:0f:6d:2e:5a:43:b2:5a:13:29:c4:37:34:
         5f:3f:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:40 2025 by rpki-client