Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa
File:                     cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa (raw, json)
Hash identifier:          tkR3vkzSN84t/CChL41oQjLAV7nCG/siz8+hGjvR6Qk=
Subject key identifier:   35:C4:DC:FE:52:54:82:4B:34:9F:3B:09:F6:BF:80:1A:35:EB:0B:7D
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F43285848090FB9E59235301E6653CA00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b9:e5:92:35:30:1e:66:53:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=a6e705df-365a-42be-b284-24d078b21176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:05:46:d0:34:17:80:7f:53:d1:11:18:ac:
                    4f:03:d7:3d:40:47:9d:02:c7:02:38:66:05:5c:6a:
                    dd:f5:b1:ac:2b:b3:e2:33:7e:8d:b9:d6:ed:50:27:
                    85:06:cd:80:e9:2b:8b:fd:4d:54:c8:e1:f5:03:b1:
                    36:6b:4c:d7:57:19:7e:74:96:5f:de:36:1f:b0:a4:
                    96:53:3a:80:24:e7:9f:7e:61:3c:78:70:f4:94:eb:
                    98:3a:6b:af:a3:01:3b:fa:88:07:77:f5:07:18:63:
                    5e:95:31:d6:b6:75:21:0e:81:a2:a2:35:49:83:bc:
                    57:75:df:f4:97:6a:32:75:2f:03:d6:d2:08:1c:76:
                    cd:fe:18:d7:90:e0:ab:95:7e:9f:ec:0b:be:96:7e:
                    01:c9:f1:c7:db:7d:00:6d:ba:90:69:47:2f:3e:6b:
                    6d:14:e8:c4:02:7d:b5:ae:b4:01:ef:8a:ad:4b:77:
                    f0:fb:f5:16:42:9e:0b:a6:d3:ab:54:4f:e5:17:c0:
                    95:f2:7b:06:13:3c:7d:4a:9c:42:90:86:8e:6e:e9:
                    4b:9e:c0:19:25:69:5c:57:c0:03:19:ed:27:b1:c7:
                    f0:21:d9:ba:46:ed:9a:19:9b:4c:c5:39:e3:18:55:
                    b4:ab:c6:31:8b:1a:24:b5:44:8b:8e:d9:f2:66:b2:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:DC:FE:52:54:82:4B:34:9F:3B:09:F6:BF:80:1A:35:EB:0B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:66:af:2d:78:f9:76:f7:70:82:b3:28:a1:2f:f7:25:91:
         6c:a3:7b:7b:ac:08:e0:14:b1:f7:35:1b:10:46:91:90:2f:fe:
         d1:47:00:79:65:9d:75:42:e8:55:64:1a:40:11:96:a6:7e:37:
         76:8e:9f:80:9a:9a:41:a8:6d:2a:1f:e2:8f:75:68:10:da:f5:
         4e:42:45:f7:fa:c4:d2:51:c2:54:3d:e5:fe:64:61:93:ee:8e:
         f1:cd:81:f5:ad:b6:a2:ff:91:93:bf:73:97:8c:1e:84:8b:6d:
         18:a7:7b:1f:8c:79:48:5a:0e:dc:cb:f5:b4:1d:d5:77:f8:f6:
         f4:3d:f5:5d:64:49:d0:ba:9b:73:66:9a:e9:a6:be:ec:8a:f5:
         6e:a1:5d:53:21:0a:91:74:bf:ba:f1:fb:4e:b1:75:a9:65:b0:
         93:04:f5:24:d6:e7:15:cc:26:31:56:5d:4b:81:f2:ef:21:5c:
         43:bf:f1:35:3f:d3:e8:0e:1a:f3:e1:5f:f3:1f:05:74:9a:ef:
         16:f5:d4:12:7a:45:f0:0d:ad:e1:da:27:b9:e5:14:84:68:1d:
         4c:5c:3e:42:4f:23:df:82:b0:4b:a0:ba:8a:82:28:67:08:fc:
         a0:9d:9e:80:2c:3a:24:55:0c:ff:fe:b0:05:c7:55:d5:82:ef:
         ff:e0:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:26 2025 by rpki-client