Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
File:                     7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa (raw, json)
Hash identifier:          xLr0p5R2m2oVFxWg8A+nQmxo42JglALzdEQaq3czec4=
Subject key identifier:   AE:1C:B9:03:40:99:45:A5:BD:4C:66:FE:2A:E8:7A:57:BF:63:DA:E7
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F432858480BDA6F724B3D399CCE1CE7C0
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     62728
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:6f:72:4b:3d:39:9c:ce:1c:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=361059db-e9a9-4ad0-8cbe-aef10f239f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5c:8f:99:a8:93:74:4e:df:9d:45:83:dc:e0:
                    bd:ff:c8:4b:8c:4d:c7:eb:72:42:b0:ae:32:03:84:
                    2d:67:2b:37:7b:b9:9d:91:0e:a1:b9:1b:8f:1c:7a:
                    60:07:ee:a9:30:57:1f:23:ac:e1:26:bc:a6:70:66:
                    ea:38:4a:d7:85:74:56:83:a9:66:aa:39:a8:02:2e:
                    b4:82:ba:84:f4:a4:d0:3a:ea:9b:48:4b:2c:d5:31:
                    35:c8:af:1f:29:49:6f:7b:84:1b:ed:96:19:fb:40:
                    10:89:69:10:96:06:28:8a:06:16:20:09:3b:70:dc:
                    24:4d:99:41:0a:c7:19:a3:5b:48:3d:de:8b:83:b9:
                    de:68:2d:11:2b:e5:d3:11:48:d0:36:73:66:1c:24:
                    f0:69:c1:c7:7f:ea:03:f6:e6:cd:da:63:42:df:d3:
                    81:59:a4:f7:82:29:55:e5:2a:e2:6f:91:f4:2b:16:
                    7d:20:ab:a8:a6:0d:cf:f0:a5:05:6c:e4:7b:a2:58:
                    2a:88:75:34:2a:1b:58:b9:a4:28:01:5f:d7:32:ad:
                    eb:7f:f3:44:f5:2a:58:9f:7b:80:89:e8:b0:f1:6f:
                    c4:ca:3e:39:b1:62:b9:77:74:98:6c:34:7c:34:ad:
                    a7:56:f3:ca:cb:b2:ac:42:d1:7b:d4:f4:23:41:dc:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:B9:03:40:99:45:A5:BD:4C:66:FE:2A:E8:7A:57:BF:63:DA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:dd:f7:40:35:63:1d:6f:39:f7:e0:4f:5e:49:dc:83:5b:93:
         82:4a:b5:41:d1:de:db:a4:e8:c1:80:f2:ae:f1:e2:1e:e6:8d:
         8b:06:b1:21:97:8e:a2:6b:d2:87:22:a0:8e:88:85:5e:e1:22:
         7e:93:47:80:21:1a:85:77:1a:53:ae:7f:14:47:ec:94:c2:94:
         73:fb:ab:79:12:84:1e:36:21:a9:ec:75:cb:ae:e0:b3:52:28:
         a9:4f:34:6a:1e:5e:d9:84:12:a1:d9:0e:b5:32:b2:8c:ed:60:
         a2:bc:be:13:b8:d9:28:59:be:55:64:65:f9:10:c1:97:13:44:
         26:e9:84:cb:d7:84:9b:a8:5d:bc:a7:23:ea:6d:b5:6c:84:fe:
         41:73:1b:ad:8a:9c:2b:b3:25:a8:97:67:df:c6:2e:61:4c:ac:
         bb:72:99:8c:a5:9a:5b:2b:ec:9e:9e:1e:02:67:29:52:79:a6:
         0c:75:5e:63:3b:05:a7:a7:cc:05:f1:b6:0a:d1:43:6c:4b:3e:
         33:b9:0b:ce:6f:5d:44:31:0b:18:f4:11:e1:f0:18:6d:08:2e:
         17:be:ae:36:4d:26:e1:4a:90:7e:32:79:da:2b:2a:15:0a:45:
         5a:9d:a9:03:a6:14:22:91:1a:c4:7e:bc:eb:4b:39:60:05:c5:
         f8:fb:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:22 2025 by rpki-client