Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
File:                     05077994-8ee8-39a7-afa1-0dfc5986215b.roa (raw, json)
Hash identifier:          heRel6gItm18cexv6F7qw3lM05s9ZwRnBXmLZOUBZps=
Subject key identifier:   3F:FD:49:6D:4A:E1:1E:23:A4:95:21:EF:B4:59:90:BE:EC:AA:4A:FC
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858487CEB3B38018ABC6C50725F00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     393249
IP address blocks:        206.12.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3b:38:01:8a:bc:6c:50:72:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=4226f539-4d8e-40b2-aa48-f713d8ceae32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:27:6c:24:d8:81:02:8b:c9:87:ba:25:ae:
                    d0:70:cb:48:69:70:d9:d3:62:12:45:15:81:45:a5:
                    cc:2e:dd:b1:f9:dc:23:fa:ab:fb:82:90:f1:37:2f:
                    b8:ba:56:c9:a6:57:8c:44:a5:c4:4b:30:51:83:48:
                    f0:7a:ae:32:87:53:d0:0d:59:cb:d3:cf:ce:2d:a4:
                    c5:a9:ef:e8:b4:4f:6a:e5:69:4e:af:92:19:73:4f:
                    7c:ea:62:ec:c3:35:8e:1e:fe:ad:3d:31:88:70:3d:
                    85:5a:a8:de:94:f0:ec:19:a3:24:6a:82:0a:50:3e:
                    22:13:58:85:99:37:c0:fd:a2:04:a9:34:86:72:2d:
                    7a:60:fb:4f:31:c3:d9:e7:91:0a:6b:6b:7a:d3:53:
                    0e:9a:c0:53:38:67:d0:56:97:52:3e:dc:60:89:b8:
                    b9:74:14:22:a0:3f:47:0e:17:ed:3e:46:39:7c:f7:
                    91:53:fa:c2:56:d2:c5:2b:95:13:c0:6e:f7:e4:77:
                    b9:53:93:81:08:c1:4c:32:03:cc:6c:82:2e:00:c5:
                    f5:63:1f:48:b0:98:ae:61:70:6f:9d:a2:4c:d0:53:
                    32:1f:66:6e:8d:f1:e6:45:28:4d:a0:5e:8c:73:60:
                    45:81:94:b2:3a:07:fd:43:b9:ab:12:e9:9a:45:31:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FD:49:6D:4A:E1:1E:23:A4:95:21:EF:B4:59:90:BE:EC:AA:4A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:49:81:82:bf:8b:58:11:85:87:cc:c1:c8:f2:b7:fe:3a:
         33:7c:9e:1c:17:a8:1a:f8:bb:77:26:02:03:c4:6c:d8:59:ed:
         33:94:10:ca:80:d5:e0:87:2c:3d:7d:42:5c:0e:86:d5:8e:bd:
         a0:aa:76:11:80:c7:44:6a:e0:42:cc:07:02:0a:41:c6:a5:15:
         a1:f3:9c:76:93:9b:70:fe:82:7d:69:ff:3d:4b:68:8e:b4:93:
         7e:21:49:d5:dc:a2:ca:81:f3:c6:d0:a9:da:2a:22:08:36:d9:
         10:43:52:7c:6f:c3:7f:ab:0c:1b:88:ca:cd:0d:ce:8d:e6:ad:
         7a:a4:18:81:ce:02:81:d4:d4:95:b1:53:d1:36:6a:06:59:46:
         cf:56:44:06:23:3d:c9:4c:1d:3e:62:b9:16:fe:a4:ca:1f:40:
         52:ea:77:3f:d2:90:75:5d:66:3b:08:a9:53:df:25:57:d6:b6:
         83:6c:6b:df:b2:dd:ce:a6:08:37:6a:c9:c0:e9:3e:2e:a9:0e:
         61:0b:eb:c4:1f:b1:f2:63:f9:9f:7e:2a:25:72:b5:8e:31:c4:
         0f:6c:0b:d3:fa:b8:ed:04:30:77:af:e4:9a:ae:58:10:9a:00:
         d0:a8:6b:78:eb:35:a1:71:6d:88:f3:57:28:9b:4d:9d:c8:18:
         09:1e:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:55 2025 by rpki-client