Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
File:                     c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json)
Hash identifier:          Xjd3O9qI8K2yvy1K6ccvw0emMFeFxGnYIi5XR527xRA=
Subject key identifier:   50:41:56:82:BE:E3:6D:C7:FD:26:DC:CE:20:38:8B:34:57:D5:28:63
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584840E55397CDABE631AAC47B80
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     400238
IP address blocks:        204.8.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:53:97:cd:ab:e6:31:aa:c4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=dc258da4-9137-451a-a96d-491728f54eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:42:1d:f7:4f:c5:c6:46:11:c7:6e:08:4f:
                    b8:33:f7:e6:d6:3e:4c:4d:4b:21:40:98:a1:68:ff:
                    40:10:3a:75:11:83:6f:a2:7f:ae:f7:bf:70:cb:83:
                    ce:10:6d:b9:22:3c:d7:a3:fc:fe:62:d1:06:77:7e:
                    8f:b9:b1:36:d7:5e:90:95:59:56:5c:f9:63:99:79:
                    cb:a3:a6:43:17:47:80:69:d3:82:b2:ff:d0:b8:da:
                    f6:84:63:4e:72:f3:60:03:1f:7b:31:36:05:18:fc:
                    cb:ec:0f:5d:60:f9:22:7f:6a:f5:58:3f:b7:26:ac:
                    f3:cd:40:c6:39:17:26:b3:de:58:8d:36:ae:98:9d:
                    8a:a5:66:d7:d9:19:3a:42:4f:9f:52:55:54:07:c7:
                    0c:a4:27:8e:ef:6e:1f:98:28:d0:9f:de:0d:20:6a:
                    ff:ec:d5:8e:8e:e6:c4:21:6a:06:56:35:58:b9:ef:
                    95:ad:32:e2:7c:dd:77:5c:6f:73:2a:b4:9b:db:1a:
                    bf:5e:37:c6:c5:5e:ca:c6:e3:3a:78:89:1d:c1:6f:
                    98:88:5f:51:84:ea:80:58:1f:e9:3b:2a:1a:2b:96:
                    c0:b3:2a:b2:72:13:66:c0:fd:35:f7:b4:c4:5e:88:
                    07:ea:46:64:78:d7:88:c2:65:78:76:c3:69:fb:bc:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:56:82:BE:E3:6D:C7:FD:26:DC:CE:20:38:8B:34:57:D5:28:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:44:96:1f:10:7c:0b:dd:21:54:d7:ad:51:81:9b:00:4f:
         9c:09:5c:fc:48:64:1d:39:7e:57:3f:ba:33:27:4b:1d:ab:13:
         76:30:fd:c4:f4:6d:91:2d:e6:46:8b:b1:68:9e:d3:84:76:e2:
         99:ed:e0:c4:21:92:c5:b8:f0:ea:e0:f8:0f:8b:02:28:57:ab:
         f3:f9:95:4f:f7:6b:8d:5e:ee:c1:dc:3b:11:1d:40:f5:18:91:
         19:39:ba:06:5f:0f:18:03:1c:f3:03:72:37:fa:24:46:d2:54:
         36:65:2a:b5:86:4b:a2:14:a5:09:17:f9:7a:3b:0a:b3:fd:19:
         a2:ca:3b:d5:21:45:68:4f:74:53:41:ee:8c:1f:1d:51:f9:3f:
         40:bb:15:4e:e5:cb:31:c4:e9:c7:3c:dc:96:fc:b2:6a:06:a8:
         1e:47:ee:0d:7e:d2:be:f5:e7:64:8c:1a:df:b6:94:34:7d:b8:
         38:8e:46:37:5d:05:d7:f2:1d:e4:2e:e5:dc:66:2d:c4:76:47:
         91:5b:7d:b3:41:3f:3f:7e:41:c3:a9:90:ff:11:fa:74:a7:b0:
         72:e1:8b:c9:af:c9:04:70:c6:2b:6e:37:c4:37:08:86:53:fb:
         18:25:3f:83:dc:69:c5:b8:6f:f5:18:1e:68:29:2b:f6:49:e8:
         d6:00:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:00:37 2025 by rpki-client