Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
File:                     0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa (raw, json)
Hash identifier:          O296SEn/wbyuvK0JuAV2T58YViSrVb6nic7eBBC5jtk=
Subject key identifier:   03:CB:5F:4A:B2:78:66:89:3E:E6:23:E8:BB:7D:AD:02:C5:06:81:3D
Certificate issuer:       /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial:       010D0C9F4328584815C48F28428B56442B64A880
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
Signing time:             Tue 03 Dec 2024 15:14:54 +0000
ROA not before:           Tue 03 Dec 2024 15:14:54 +0000
ROA not after:            Mon 03 Mar 2025 15:14:54 +0000
asID:                     13343
IP address blocks:        208.94.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:c4:8f:28:42:8b:56:44:2b:64:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Validity
            Not Before: Dec  3 15:14:54 2024 GMT
            Not After : Mar  3 15:14:54 2025 GMT
        Subject: CN=ddfb0508-7bda-4c3a-af8b-c25ed676bc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:fc:cf:08:1c:df:2a:4e:d7:9c:4a:ac:13:
                    16:9c:22:5a:30:29:7d:c4:00:c2:19:e2:8f:9f:86:
                    42:d0:bb:dc:f0:24:9e:ba:73:e2:94:d5:a5:62:9d:
                    3a:a3:69:7a:ea:6f:d0:b1:4f:76:d1:25:c5:ef:ed:
                    2b:98:51:98:d0:60:a9:16:f5:1b:d2:b4:d4:b6:06:
                    08:98:4b:c0:70:cc:77:02:47:d3:93:ab:5e:ea:32:
                    34:19:3e:74:14:8d:9d:08:62:2f:f6:d6:d0:ab:76:
                    16:7b:f0:1c:d5:0a:cb:0e:94:71:74:4f:d9:87:f5:
                    b6:5c:7c:20:d8:85:6a:7b:a0:0b:1c:79:c4:76:c3:
                    48:4c:3c:fb:fe:ec:3e:61:4e:17:89:5c:93:7e:8b:
                    57:b6:52:ce:8a:70:ed:36:07:54:ed:3c:00:ff:76:
                    d8:0a:df:87:17:4c:46:08:ea:ac:dd:a4:e8:2a:ac:
                    e5:ea:7c:f8:7b:2f:c7:af:65:32:24:59:b0:99:43:
                    f8:7e:d7:de:30:83:12:dc:f0:77:3f:0e:78:db:50:
                    45:5d:36:1d:f0:e5:85:bf:46:94:d7:ad:7e:5d:64:
                    e6:f5:7e:72:cf:88:da:fa:e6:99:8a:32:1e:69:3a:
                    b9:57:0a:8e:4c:8f:2f:ce:39:ae:58:3b:62:1b:3b:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:5F:4A:B2:78:66:89:3E:E6:23:E8:BB:7D:AD:02:C5:06:81:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:73:51:7a:7e:cb:c5:8d:80:20:8d:f1:e0:ef:ca:a7:90:8b:
         b9:e5:7b:a4:00:9f:89:e8:b6:f3:e8:1f:40:7b:d8:8f:1c:86:
         89:00:7e:da:f2:04:16:15:25:52:84:d3:ea:ff:58:a8:29:3b:
         88:e8:05:d7:c9:95:9b:77:b0:72:23:c7:ee:7d:73:0c:93:34:
         1b:bc:d4:b1:15:b9:66:3e:6b:39:da:52:db:76:f1:fc:14:c1:
         b5:74:1c:b5:6d:a6:e1:2d:9a:8a:28:4a:79:26:c7:95:ef:60:
         f8:7b:a0:67:b5:8c:73:fd:4d:5e:4d:15:73:a3:e5:14:10:51:
         5d:e0:fd:e6:bb:21:d7:f4:e5:75:e8:a3:2f:a9:bc:0c:7c:ba:
         87:46:9b:91:da:a7:15:1f:31:ac:c5:dd:a2:a1:b2:a5:fe:b0:
         b0:ec:37:7a:40:85:41:09:9f:55:96:9d:22:cb:46:50:48:25:
         c2:5c:b1:5f:17:9d:81:b2:70:14:64:95:b5:1e:d2:8c:05:79:
         db:12:17:78:be:07:c9:8e:c6:2f:ed:01:97:69:54:29:e3:40:
         e7:1a:3e:ea:41:48:01:26:91:19:16:82:49:67:82:7e:30:0e:
         1b:ff:d9:ce:a3:4d:2e:f3:ad:8a:ef:65:3c:2d:96:7c:15:8a:
         44:e9:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:56 2025 by rpki-client