Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa
File:                     6861e73e-e2e8-37e1-b70b-ce93935e9526.roa (raw, json)
Hash identifier:          k3yFEBUkJW0/p4jN9bLl+buhhF61WL7g7T9RKgKdRDQ=
Subject key identifier:   C8:BE:1E:B3:28:9F:C0:F5:72:03:EA:9E:52:F7:3F:F9:77:E7:5D:6A
Certificate issuer:       /CN=b8a0e292-3e8f-447b-81c6-cedef4747341
Certificate serial:       010D0C9F43285848424ADCF9D2A98400C09C00C0
Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     398274
IP address blocks:        64.202.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:f9:d2:a9:84:00:c0:9c:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f1b51ea6-41a4-4c7c-b424-e96efba8b204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:0e:cf:57:f7:95:af:7d:d5:fd:70:87:bf:
                    2c:21:42:8d:9e:a9:61:6e:2a:c5:a8:1f:f5:7d:f0:
                    7a:e4:ca:23:47:fe:ff:ff:4a:2a:46:c6:4d:fd:c3:
                    cb:12:61:32:85:1f:e7:88:1e:38:93:85:a4:bc:a1:
                    28:b2:dd:f3:a7:87:11:6c:dc:da:31:cc:73:4e:35:
                    33:b0:02:0b:cb:00:00:8c:72:cf:32:21:22:27:fe:
                    ba:a1:b4:63:d7:b5:33:ff:ca:ac:d6:3f:18:c1:7a:
                    ba:ee:b3:0e:55:3d:59:69:a0:24:32:24:19:91:a4:
                    b6:c4:70:c0:d0:b2:19:64:6c:7a:dd:5f:dd:e0:83:
                    5c:74:4d:5a:7c:29:35:47:dd:7d:ac:f9:63:ad:8c:
                    4f:99:6b:b8:76:01:72:b5:bb:7e:8c:16:76:00:2b:
                    24:cc:02:11:c9:4f:af:ba:4d:08:3d:65:74:25:33:
                    37:f6:28:28:30:9d:e3:67:d7:55:84:75:d8:87:93:
                    5f:a2:04:4e:e6:c0:79:79:5f:a4:22:16:b3:08:f3:
                    da:4a:c9:83:86:3a:84:e4:9f:06:92:84:0f:6e:1d:
                    b8:4c:ca:b8:18:db:4c:f0:3e:b6:95:95:21:f4:81:
                    34:16:26:36:bd:fe:02:7f:cd:90:88:48:67:f2:98:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BE:1E:B3:28:9F:C0:F5:72:03:EA:9E:52:F7:3F:F9:77:E7:5D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl

            X509v3 Authority Key Identifier:
                keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:a9:fb:bc:dc:38:16:94:a8:7e:9f:f0:6a:96:90:6a:6e:
         61:53:02:eb:2a:77:0f:c0:3c:b6:31:f2:04:89:12:7a:fb:34:
         a2:1e:c7:59:5d:c2:e2:57:19:81:54:2e:e1:5a:80:42:69:cb:
         04:35:37:4b:e5:99:45:9c:8b:73:ab:cd:6d:a4:f3:1b:c2:a0:
         49:41:c8:14:a6:12:ef:e8:c8:c0:76:62:eb:b1:a4:45:33:d3:
         72:99:31:1c:31:0d:41:99:d2:5b:29:3b:d5:ce:91:ff:15:54:
         c4:e0:ab:dd:0c:b9:7e:5b:2a:be:11:ca:87:a6:0f:94:27:7f:
         84:9e:73:ac:29:7c:f1:f3:d2:4c:15:01:ce:7c:32:77:26:4d:
         ff:15:7f:c6:96:87:a3:d5:6f:47:fa:f6:c7:47:66:71:8c:4f:
         15:83:83:6b:27:df:de:4f:e2:1a:7d:38:49:7a:e5:e8:4f:12:
         a6:af:7e:13:e7:15:e3:2f:a4:56:d8:5e:3b:c7:7e:d7:f2:5c:
         55:5c:1f:06:91:03:03:99:8f:3c:70:22:43:c7:3d:bd:c9:b2:
         60:95:3f:77:e9:1f:f0:83:6a:f0:be:a4:f4:88:66:1b:d9:53:
         e1:12:a9:79:a8:35:e6:03:98:57:1e:48:54:e0:3e:d9:a2:e3:
         40:d3:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:33 2025 by rpki-client