Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
File:                     a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json)
Hash identifier:          J9rwVncdRkRiVDArf88vGu1SuYDIbi/DgTOQCk4Ysgw=
Subject key identifier:   FB:BC:8E:86:D8:83:31:94:C0:A5:98:5B:A3:03:8D:EC:10:B3:FF:63
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F432858485B6AF808269D961C22088840
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     20326
IP address blocks:        208.91.104.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f8:08:26:9d:96:1c:22:08:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=177de408-6730-446b-b132-d35d5b595adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:04:38:73:c2:c8:66:f8:4f:8d:7c:c1:80:
                    04:d2:cd:f4:93:07:a5:22:87:fb:ab:92:aa:2a:34:
                    fd:40:b3:e8:9f:b2:ad:ed:2c:50:89:7d:25:cb:e7:
                    5b:2b:08:e8:95:5f:d5:33:ff:8f:fb:10:95:49:af:
                    db:31:ad:0d:a1:87:5e:b2:13:78:e5:f9:ba:bf:90:
                    94:de:0e:2a:f1:65:ed:fb:ed:98:c7:ef:51:7f:51:
                    13:6d:2c:62:00:cf:95:e1:e0:16:46:06:26:0b:1c:
                    a1:b1:da:ea:a4:40:fb:3c:a8:ca:3a:7d:b5:37:76:
                    d1:25:4f:46:e2:72:40:fd:7e:7a:db:73:9e:11:74:
                    85:77:3c:1a:09:ca:15:13:89:fd:15:ef:5d:f9:d8:
                    1f:d3:d5:47:c9:c7:38:12:84:e6:1e:75:07:e8:da:
                    eb:c3:a1:86:f2:18:91:c7:01:ba:e7:14:3d:1e:7b:
                    9c:be:ec:2d:69:ff:b2:f5:08:d7:d0:fe:50:8e:1d:
                    25:1d:45:be:70:f5:b3:8c:82:4f:59:34:b7:94:bb:
                    e9:36:72:74:ef:31:ab:1a:1d:e5:90:01:62:e5:7c:
                    96:2a:36:50:42:a2:42:d2:41:c1:0f:69:16:4a:22:
                    65:17:ae:18:1c:16:cb:19:f8:d0:62:77:54:eb:ff:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:8E:86:D8:83:31:94:C0:A5:98:5B:A3:03:8D:EC:10:B3:FF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:09:46:5f:20:94:dc:cb:e0:9d:07:95:44:fc:26:3d:65:
         32:a5:f2:cf:4c:b9:db:7e:4d:31:d9:cd:18:34:4d:56:14:ff:
         ad:4a:0e:c1:7a:97:db:8e:0f:75:34:e6:15:c5:86:b1:c5:88:
         14:42:69:4f:87:3e:88:4a:ef:2c:58:ff:7a:50:b5:1e:3c:47:
         1e:f2:fd:79:7b:3b:42:c2:8b:7e:41:7b:96:06:dc:40:69:a1:
         54:55:de:b4:d3:8b:1a:d3:29:20:76:c2:b6:a4:db:fe:d5:c4:
         25:03:46:cb:23:fc:ca:9a:f3:95:fb:82:db:3e:30:44:6e:75:
         05:f5:0c:08:63:94:a8:74:b0:3b:c1:36:c0:3e:65:aa:14:aa:
         93:82:7f:28:8d:7c:46:42:c9:46:4a:1f:ac:47:f7:b6:f1:53:
         76:7a:75:62:36:4c:a8:84:85:60:d6:25:b5:70:87:1e:b8:0d:
         6a:1c:d0:f6:10:f2:24:43:db:e2:6c:75:45:45:a5:a3:6c:fc:
         91:3c:e2:13:b4:26:33:63:5e:bb:fa:8e:7b:5b:cc:91:c3:6f:
         09:70:4b:c0:06:11:7a:bc:ce:d1:7b:32:42:c1:d9:a3:71:bd:
         87:54:b3:38:11:fa:43:3b:af:0c:ea:be:e6:2a:13:40:ff:bc:
         39:11:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:41:07 2025 by rpki-client