Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
File:                     b22085cf-e389-3e14-9173-666e83976274.roa (raw, json)
Hash identifier:          f1wS5VnF/LwpIqzzXO/UOsgt7KYWa0pLO7L656UaebI=
Subject key identifier:   C3:93:ED:8B:50:80:19:88:7B:12:87:A9:7F:EB:00:02:DC:C9:98:B9
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F432858480BDA65F38407EFD6BFB01640
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     62700
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:65:f3:84:07:ef:d6:bf:b0:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=e23f3400-7c39-492c-922b-9801467b3daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:07:1f:d7:7d:d5:55:8e:ca:f0:ef:f0:78:
                    ba:99:e7:3f:bb:48:34:52:7c:85:6f:6f:79:e4:e3:
                    c0:b4:9d:0e:01:ac:5b:e6:29:01:a3:21:4a:70:c9:
                    28:f6:49:7e:8c:63:7f:ae:fb:d1:fb:f9:5d:ab:7d:
                    70:22:83:99:d5:9c:bd:d6:0e:9a:6a:69:17:15:be:
                    52:bc:3e:91:aa:fb:d4:fc:4e:28:41:b8:f9:b0:ac:
                    70:ef:fd:ff:0d:1b:06:05:35:70:2e:d0:c7:c2:80:
                    e3:4d:c0:13:8d:00:54:0b:da:4b:11:b3:40:06:6f:
                    c7:24:46:3f:00:1a:4d:87:f2:6c:01:84:b0:ba:fc:
                    84:0b:5a:ae:df:37:3d:0b:dc:70:07:9d:79:c5:fc:
                    2f:4e:3f:37:76:d4:9f:4c:e7:43:30:85:11:46:1b:
                    ff:be:d1:95:b7:2d:da:18:82:83:9b:f3:c8:34:8b:
                    76:83:2a:f2:35:21:3b:c4:e3:26:52:7e:d9:4f:37:
                    1e:91:70:cf:d1:15:d6:e2:89:a1:8f:b2:7b:c1:11:
                    cb:d5:77:84:2c:e1:28:22:b6:cc:20:87:ba:14:15:
                    7e:2e:64:5c:1b:e2:43:5f:40:40:a4:1d:69:fa:8e:
                    d5:89:3f:eb:b9:3d:a4:3e:c6:23:4d:15:35:6c:1e:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:ED:8B:50:80:19:88:7B:12:87:A9:7F:EB:00:02:DC:C9:98:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:9b:f7:d5:2c:29:57:f1:43:08:c2:34:51:ce:c7:9b:c9:
         b9:f6:3a:f7:12:27:85:4e:19:7e:99:a4:6e:da:7d:60:a4:94:
         1f:38:22:a3:47:4f:78:ef:36:ea:f0:3a:9b:97:c6:60:df:14:
         cc:c8:42:a3:50:a9:0d:e4:4b:47:ae:a9:aa:47:66:89:cc:83:
         10:b2:64:b3:06:9a:21:3e:b5:9d:31:e4:32:32:76:fd:3c:be:
         37:fa:37:54:c7:f7:fe:68:86:b1:81:7e:8a:48:71:50:55:44:
         51:c1:d7:b6:d1:f4:54:46:f9:1c:ce:bc:31:f5:fd:94:94:61:
         6f:09:9c:7e:6e:94:e5:66:be:0f:5a:3d:e9:e2:e9:dc:fb:9b:
         2b:61:70:95:63:01:30:e2:40:4b:7d:01:a4:75:7e:4a:e6:1d:
         07:c6:79:c0:c2:09:a0:95:6d:06:6a:fd:57:52:04:d2:79:ba:
         18:af:ba:e2:5c:a5:5c:0d:3a:49:73:f8:67:73:e3:a4:fd:71:
         17:fb:38:fc:f5:95:d8:c8:09:d1:54:22:67:43:7d:36:e8:48:
         4e:43:ae:49:87:a4:ca:41:9c:7f:1c:63:de:3d:4c:6a:1d:5b:
         4b:e3:7d:58:71:e4:de:17:80:2b:80:22:85:2e:9c:5c:21:15:
         73:a5:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:51 2025 by rpki-client