Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
File:                     17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json)
Hash identifier:          5AV4QkFDK1jxQYh1enFnzQSOhA8fR0Vn6kXLfD+jZ4Q=
Subject key identifier:   2A:B7:0F:8D:0C:E7:C3:14:F4:51:54:EC:7A:75:D1:8A:AE:4E:96:CC
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F43285847FDE4D76F3C34CF6EBD536C80
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     46616
IP address blocks:        208.114.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d7:6f:3c:34:cf:6e:bd:53:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=beb5dac1-738c-4d72-91f0-08e3485ddb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:06:00:b7:e5:57:7a:e4:e8:f3:68:fb:d4:
                    9c:b6:1c:ce:84:4a:ed:c1:33:07:85:ee:7c:1a:08:
                    0a:74:1a:69:e2:b6:ad:73:9e:bb:0d:22:ed:97:2b:
                    28:37:b4:3a:f1:28:a0:e7:2e:ca:13:8d:67:b2:f3:
                    5b:99:8d:ee:87:a3:e8:da:68:43:1c:99:51:cf:ab:
                    3b:74:0a:fc:12:ba:df:7f:95:1f:ab:f6:34:ad:d2:
                    43:95:6b:e8:6a:fd:19:9d:68:ee:c9:fb:1a:d6:e5:
                    13:5d:93:5a:b5:02:d1:24:ca:87:8e:53:3d:23:d6:
                    4c:b3:8c:33:f0:93:9a:7f:74:44:bd:ea:6f:15:38:
                    ac:dc:41:c1:66:e1:16:52:75:ea:29:5d:e5:8d:e6:
                    a9:3c:ca:e1:4e:0a:67:37:01:40:a9:6e:e6:ae:dc:
                    24:42:fb:65:52:9c:d5:24:7f:7e:bd:eb:92:28:12:
                    09:56:ad:2c:aa:62:6a:9a:cb:f0:89:d9:32:a7:f6:
                    57:d4:e4:85:71:6c:53:29:e7:c0:ee:cb:45:d4:91:
                    d4:d4:02:39:e8:2f:bc:77:0a:b2:b7:37:54:6a:d5:
                    3d:0f:4f:90:d3:62:ab:c8:29:cf:af:aa:e7:3a:5c:
                    a4:3e:dc:7d:84:80:fd:05:14:10:92:25:f8:f5:1c:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:0F:8D:0C:E7:C3:14:F4:51:54:EC:7A:75:D1:8A:AE:4E:96:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:71:03:64:19:f0:d4:18:07:08:f4:73:38:75:71:d9:ef:b1:
         ca:b7:8b:3f:1d:15:8a:d6:66:48:1f:ee:a8:86:6d:c8:6a:a1:
         98:4b:2a:43:ef:0d:ff:81:fe:a5:34:d0:6a:62:d4:16:b4:92:
         83:ce:ce:a8:8c:9c:72:bb:92:18:9c:3e:1e:14:60:80:4b:a1:
         90:88:24:ae:f2:bc:c2:f0:8b:01:1b:6f:27:65:e0:26:82:67:
         66:81:21:a0:83:42:10:2d:47:2d:ab:bb:54:c2:d8:a1:98:92:
         82:b0:1f:1a:1c:72:35:6a:31:bc:38:d5:04:38:58:89:f6:e8:
         93:56:85:62:fe:ef:79:87:7c:7a:ef:b7:82:ec:78:e8:bb:13:
         bf:9e:a8:bc:a9:6b:a9:dd:0f:36:46:e1:c2:63:96:d5:61:78:
         48:cb:07:cc:79:1d:d5:50:80:5c:07:c6:74:9b:8e:bc:93:df:
         05:c2:30:ad:b9:a6:34:94:e7:98:45:60:ac:60:ae:b1:bc:c8:
         ce:4d:69:21:6f:26:5c:31:76:e7:f1:b5:89:92:39:c5:32:d7:
         18:42:f5:52:ae:9f:79:03:ff:8f:da:e6:be:8e:15:c4:6d:59:
         6f:50:9c:5f:96:84:94:f4:ee:4d:64:97:0f:03:bf:91:39:fe:
         05:ed:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:56 2025 by rpki-client