Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa
File:                     ef6f39df-d42d-344c-b157-ee274f562c9d.roa (raw, json)
Hash identifier:          Zjx75mnEIMTaG6FFNyxRr/BN+Tusf3HOLEY3LqZTXbw=
Subject key identifier:   71:1A:F7:62:80:27:FF:D8:B4:03:BC:80:4C:C0:F9:EB:6E:64:70:F8
Certificate issuer:       /CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
Certificate serial:       010D0C9F43285848621D62D437BDD9FDE9DA2740
Authority key identifier: E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa
Signing time:             Mon 30 Dec 2024 23:35:19 +0000
ROA not before:           Mon 30 Dec 2024 23:35:19 +0000
ROA not after:            Sun 30 Mar 2025 22:35:19 +0000
asID:                     53356
IP address blocks:        216.40.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:62:1d:62:d4:37:bd:d9:fd:e9:da:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
        Validity
            Not Before: Dec 30 23:35:19 2024 GMT
            Not After : Mar 30 22:35:19 2025 GMT
        Subject: CN=08c860ea-da83-44a8-a838-ba75b4a384c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:9b:1e:ed:e3:ee:e1:76:32:fb:af:b0:90:
                    73:c9:e7:cb:40:32:fe:fa:e5:91:82:2e:7f:81:72:
                    e7:0b:d1:9f:ac:8c:97:2c:92:d2:99:a0:72:1d:30:
                    a0:e7:db:b5:56:22:9d:35:e5:b4:a5:94:a0:ec:ac:
                    02:97:4e:f3:7e:5a:cc:1a:4d:3d:2d:50:03:fb:21:
                    a8:f9:15:62:c6:ba:79:b0:fc:fd:04:39:32:97:6f:
                    cc:e6:d3:9a:ae:44:6c:07:6f:99:77:6a:ac:ef:c8:
                    12:96:ec:41:0c:01:a6:f1:51:a0:a0:db:27:70:d6:
                    81:a6:c6:12:8a:cc:0f:bd:63:b6:7d:a9:7d:4e:0b:
                    51:b6:fc:1f:95:8f:6b:6f:ab:ce:34:24:e5:09:4e:
                    f1:9b:d9:a3:16:fc:72:75:39:8c:63:bd:27:64:f6:
                    ad:2e:e4:77:0b:e3:01:ed:42:83:6f:80:b2:79:90:
                    12:48:69:fb:cd:3f:ce:aa:d4:e0:77:26:72:30:a8:
                    fb:7a:16:a0:e5:be:04:88:79:69:ca:78:15:ea:10:
                    99:e8:76:b1:16:71:d7:ff:5e:ca:35:99:8e:d6:bf:
                    a7:09:de:b2:83:95:23:45:9b:0a:c8:fc:82:3c:0a:
                    64:23:18:a1:cc:eb:85:52:33:7d:34:4d:b9:a2:ba:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:F7:62:80:27:FF:D8:B4:03:BC:80:4C:C0:F9:EB:6E:64:70:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.crl

            X509v3 Authority Key Identifier:
                keyid:E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7f:df:d3:af:1b:12:14:1e:e6:c6:a2:a5:cc:3b:07:c4:8c:
         2f:9c:68:62:4c:53:ce:c4:2f:1e:9b:2b:34:54:88:0f:ed:b1:
         2f:2f:8d:27:44:ef:8c:4d:c9:5a:4f:80:38:05:ce:bd:e7:19:
         41:dc:5c:fe:11:b9:b2:9b:e4:7a:9d:71:34:0c:4a:ca:e2:ff:
         8b:1f:c5:f7:e8:61:2d:44:2e:4e:47:a6:21:db:a6:02:f2:aa:
         ee:03:1b:ff:07:36:06:3a:95:07:f9:72:7d:ef:a7:02:8a:09:
         9f:67:44:a0:8c:a6:d0:02:7a:c1:56:3e:2f:4b:81:bb:33:94:
         b7:b6:cc:bb:33:16:18:35:4f:f6:2a:6d:c0:61:79:cd:64:dd:
         b0:8f:73:98:56:15:8d:a5:32:1a:93:0a:73:9e:75:3b:1f:27:
         d8:0d:e1:63:2b:3c:8e:85:41:fe:40:4e:76:3e:cc:0d:e9:b7:
         ac:cc:2c:9a:0b:bc:bd:48:2f:f0:9f:30:91:4b:6d:e8:23:79:
         98:00:c3:65:0d:c3:c4:69:1e:19:50:7a:0b:87:d5:09:84:44:
         ef:92:0a:e3:24:d3:b0:1e:fd:78:f5:f4:d2:1c:ae:4b:a8:a7:
         f7:02:06:78:04:f8:31:95:75:00:e0:f1:05:2a:8e:7d:1f:bb:
         47:67:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:57 2025 by rpki-client