Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
File:                     52215577-a591-3e62-b438-ff08b1bba9ec.roa (raw, json)
Hash identifier:          xR+fVTLD6y+fhW/FO8BRb1ZZYgo9czJ0VjiJQ+q+9ys=
Subject key identifier:   C5:A0:D3:B7:E0:E7:87:FC:B9:AA:FC:DA:EA:1D:28:DC:19:C5:D6:9A
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F432858480EA50D22AD9912B8911CBA80
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7782
IP address blocks:        209.193.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:0d:22:ad:99:12:b8:91:1c:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=ab39cd3e-f3ad-49ad-be41-32d272074a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:7a:a7:3f:28:72:4f:51:20:b8:10:dc:3f:
                    1f:58:5c:8f:8a:9f:e9:75:81:42:c7:1b:5e:aa:d4:
                    2a:da:33:13:81:14:50:32:3d:7b:7b:b2:e6:e2:b1:
                    19:52:f1:51:f0:2a:52:d4:90:d1:b7:a6:ee:5b:68:
                    7c:cc:a1:fa:5a:cd:4d:de:89:f5:e4:e6:d2:87:10:
                    00:95:95:eb:89:91:fa:b0:0c:35:1d:12:34:0d:af:
                    fb:1a:13:06:89:73:4e:13:1a:19:27:df:8c:0d:95:
                    57:7c:2e:81:e1:0b:99:9a:21:64:12:d4:c4:07:e1:
                    a3:56:86:23:43:54:ef:6b:5d:b4:1f:7e:a4:88:c0:
                    50:02:0d:da:dd:25:cc:a9:45:05:b3:af:b3:f9:be:
                    ad:f0:4b:f7:a0:20:41:5b:1b:79:a2:f7:72:8f:53:
                    38:e4:bd:56:49:bc:76:b3:2c:ac:28:0e:85:5f:f0:
                    c4:09:5e:19:33:d3:bb:e4:79:de:54:db:f9:89:43:
                    93:6e:9f:25:ec:5f:25:fc:4b:e0:b9:7e:2f:ba:da:
                    32:20:62:a1:f2:68:66:88:a7:42:96:2b:8c:23:8d:
                    2f:74:b0:10:b7:54:39:c8:ea:ee:65:12:49:f0:59:
                    f4:79:d4:5b:e7:ee:31:69:f7:c6:b1:b9:05:14:b6:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A0:D3:B7:E0:E7:87:FC:B9:AA:FC:DA:EA:1D:28:DC:19:C5:D6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:54:c4:8b:e7:3f:63:a2:4a:47:dd:ac:32:09:dc:40:01:f0:
         ae:1f:df:a8:00:be:30:e6:7b:06:85:58:2e:8a:cb:b5:be:e0:
         3e:05:78:7a:06:cf:f8:00:ed:c8:b6:68:50:52:ba:24:e8:e8:
         7b:7c:03:b8:cf:97:2d:0e:31:7f:f8:10:e7:8b:e7:02:03:6a:
         49:a0:02:ef:77:e6:67:d6:73:37:f2:bb:ca:bf:5d:62:99:49:
         8e:4b:e7:7e:e7:a8:eb:08:e2:4f:08:84:d7:1b:5a:eb:f4:86:
         34:57:6e:7d:56:92:54:d0:31:66:37:7f:14:db:ab:8f:00:ae:
         dc:a2:00:65:70:43:88:c0:d7:ee:bc:9d:1f:ce:04:ec:39:6f:
         a2:53:d3:ec:ca:b7:97:30:27:27:27:c6:86:18:99:91:e6:b6:
         14:97:e5:f0:74:25:a6:01:14:70:0b:14:d6:d9:9f:a8:eb:68:
         f0:48:18:f5:38:9d:b0:b1:05:d4:07:84:67:e1:79:dc:ac:38:
         e3:a7:92:ad:6e:cd:a8:a5:f2:98:42:71:6b:11:a0:13:7d:f3:
         03:6c:70:42:0d:d2:b6:5e:8d:9d:01:fb:93:97:60:7f:74:33:
         a9:ec:6d:69:2f:e0:22:37:55:01:82:ef:45:4d:63:41:59:10:
         1a:5c:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:00:26 2025 by rpki-client