Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa
File:                     afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa (raw, json)
Hash identifier:          9hZ+xcYE3YNftW9km/2uLr3glcw6gHIwpoTi+rvWjuI=
Subject key identifier:   23:01:FD:84:2F:C7:69:49:0D:D1:BE:F8:D9:7F:0C:14:5A:F6:09:D5
Certificate issuer:       /CN=66580030-eaac-4617-b624-3b0a2974a04d
Certificate serial:       010D0C9F4328584850B8295E0E444BF89BE49D00
Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa
Signing time:             Tue 24 Dec 2024 18:02:37 +0000
ROA not before:           Tue 24 Dec 2024 18:02:37 +0000
ROA not after:            Mon 24 Mar 2025 17:02:37 +0000
asID:                     23352
IP address blocks:        199.30.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:b8:29:5e:0e:44:4b:f8:9b:e4:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Validity
            Not Before: Dec 24 18:02:37 2024 GMT
            Not After : Mar 24 17:02:37 2025 GMT
        Subject: CN=c497ba5f-8324-49a4-a503-d1efb2547bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:9d:9b:60:5d:39:e7:ba:13:72:ff:5c:31:
                    2b:63:9f:38:22:26:e0:6d:0f:e9:b7:92:36:65:3f:
                    a0:41:a6:1c:b9:6a:e4:54:0b:82:54:19:b3:45:51:
                    da:60:54:6b:1f:9c:96:0b:8f:1c:b3:d1:b4:19:74:
                    5e:e8:cf:6a:cb:ab:63:ec:15:b6:f8:ba:73:b3:0b:
                    41:5e:7e:39:2d:95:72:c1:62:42:e4:eb:ca:66:3e:
                    04:60:fe:e4:67:cc:8e:dd:9e:fd:86:6d:97:f3:33:
                    26:3f:1f:51:5d:fc:93:6d:0f:92:8b:e5:a5:16:ce:
                    64:59:1c:4b:43:5b:3e:5f:61:e5:f1:3c:18:2d:1e:
                    13:1d:76:37:cd:29:3b:cf:b4:1c:3b:3f:ed:be:9d:
                    ca:bc:08:c7:d6:d6:91:8b:5b:68:23:51:04:d9:ab:
                    ea:dd:74:8a:a4:da:19:d6:ee:d4:f5:37:12:11:86:
                    2e:e8:62:0a:2d:29:fd:df:1d:b6:62:02:e0:12:e4:
                    87:44:42:09:62:da:10:81:65:7d:56:dc:cc:98:fd:
                    56:5f:2a:37:44:8c:78:78:1f:45:f7:36:9d:6f:5b:
                    79:e8:d1:d7:9f:81:38:d0:8d:ea:bc:af:dc:a1:d1:
                    9f:8e:83:02:8a:5d:d0:89:16:05:1a:ac:46:5a:aa:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:01:FD:84:2F:C7:69:49:0D:D1:BE:F8:D9:7F:0C:14:5A:F6:09:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:ca:77:8f:e8:22:89:0d:66:bf:81:7a:b2:53:e5:6d:41:
         29:76:57:3d:4f:bb:fb:b9:9e:12:4d:53:9b:7c:65:6d:4e:34:
         74:c9:b4:dc:52:82:90:5c:2e:b3:6f:ef:55:cb:95:0c:ea:f4:
         a7:26:da:41:c5:38:59:d9:87:82:e5:00:51:74:29:76:c2:c4:
         2c:fe:4d:e4:32:5d:bf:39:b4:bd:18:db:97:97:ac:7c:24:46:
         a7:2d:f7:01:b9:cf:02:53:77:90:02:bb:9b:6a:71:70:1f:1f:
         ce:6e:e2:5a:1f:73:81:13:66:c6:55:69:52:6b:4e:a7:64:20:
         7e:9c:7b:8b:70:06:9e:b7:6d:42:0f:7e:dd:39:c3:12:7f:cc:
         26:6a:7f:7d:d5:24:ec:ee:28:b5:59:75:d2:46:59:7f:a0:44:
         4b:2e:63:2d:4e:a8:15:d8:fb:0b:09:1c:16:4c:34:35:86:38:
         f3:86:e1:81:bc:52:bf:e9:d4:c2:25:21:5c:0d:6d:60:32:50:
         ef:92:65:e5:16:b9:bc:24:6a:8a:d4:9c:0f:d1:22:7e:ab:2d:
         f1:67:6d:06:67:0a:ce:2e:54:56:8f:d7:95:92:32:97:c0:af:
         81:04:2b:54:f3:b4:63:ed:4a:bc:7d:9a:5b:25:c6:ca:b0:e1:
         06:a2:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:42:02 2025 by rpki-client