Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/ac320435-ac56-3ee7-9800-9de91bdc57d2.roa
File:                     ac320435-ac56-3ee7-9800-9de91bdc57d2.roa (raw, json)
Hash identifier:          Z87FnkVwMj0xvmstygdsIRxtg0BluDebq2B0yjhYdQs=
Subject key identifier:   29:6B:B0:D9:44:9C:64:F9:2F:83:FF:DD:22:72:10:5F:B6:84:C1:B4
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584898D60516AD89EF72397FDC00
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/ac320435-ac56-3ee7-9800-9de91bdc57d2.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     2381
IP address blocks:        216.56.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:05:16:ad:89:ef:72:39:7f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=531e4f65-4b74-420a-bb97-63cf02121ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:20:66:98:80:41:63:f9:4b:0e:cf:98:38:
                    96:e2:07:2d:cd:00:41:8b:62:db:5d:28:20:48:77:
                    e2:08:66:ba:d5:88:9f:43:04:a2:39:c1:63:78:92:
                    48:c6:38:eb:23:89:cd:46:0b:bb:fc:9a:91:eb:86:
                    bb:a4:49:44:41:7c:c4:54:cc:41:f2:c3:9d:2a:47:
                    f6:6b:42:0a:a1:85:84:0e:16:9b:d4:03:07:ba:07:
                    c0:18:95:28:25:b4:d8:a2:b1:a0:45:86:14:21:c1:
                    c3:08:cf:29:e7:cf:dc:5e:be:6f:dc:28:fb:20:de:
                    7c:77:8c:c4:8b:33:31:77:f5:88:a3:da:53:f6:79:
                    8c:84:27:32:7f:f3:ff:50:79:b7:41:c2:4a:5a:3b:
                    00:55:1b:33:59:9d:6a:0c:1c:c1:66:d9:81:c8:89:
                    ea:63:79:ba:df:e2:8d:ae:53:bb:4d:f8:e1:c1:77:
                    62:de:fc:a1:2d:42:00:e0:32:95:d4:a5:81:75:1f:
                    50:fd:cd:e3:d0:bc:c7:47:f5:78:76:41:7c:80:43:
                    7d:56:57:ef:be:c1:79:62:8f:a1:a6:61:05:82:d7:
                    95:a0:bc:7b:fd:7e:7a:68:e2:e1:b9:0f:6c:a9:0e:
                    e2:76:a7:2d:1f:7f:61:8c:93:98:2e:f7:5a:d1:e7:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:B0:D9:44:9C:64:F9:2F:83:FF:DD:22:72:10:5F:B6:84:C1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/ac320435-ac56-3ee7-9800-9de91bdc57d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.56.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:18:7c:db:42:9d:bc:46:d6:fd:26:69:9e:0f:ff:3b:11:31:
         82:91:7d:e3:fb:b6:87:93:c1:d2:92:06:99:db:96:bd:7d:98:
         26:9c:0e:12:13:ae:d6:89:d6:b1:3e:29:8c:66:55:59:bb:b3:
         d8:03:81:9a:49:41:ad:f5:d6:de:ff:c0:1b:07:02:e2:ce:f6:
         d7:43:f9:48:de:7a:12:6c:e7:dd:47:2f:5b:77:85:23:bf:85:
         a4:1d:56:8a:87:86:fd:c5:bd:d7:ec:ee:70:f1:af:04:7e:f2:
         5f:13:31:e8:b8:0d:5e:3a:26:ee:ae:8c:06:8c:73:44:23:04:
         de:5e:ff:80:4e:89:9a:57:ed:3c:6f:ae:9a:d9:9d:24:f7:2e:
         30:af:59:e2:f5:c9:52:b4:ba:af:06:6a:bd:9c:99:fd:1d:2f:
         6d:fd:ce:d3:34:cd:a6:dd:1c:80:f5:ca:72:ee:fb:92:ee:78:
         12:c8:3a:02:e3:b5:b7:51:31:0d:c9:30:b2:fd:53:0b:9a:48:
         73:2e:b8:aa:46:8e:93:4b:02:3d:80:9e:37:0a:19:0b:53:b8:
         42:a7:ff:9d:99:f8:b0:34:ee:d3:fd:cb:58:7b:02:07:fa:6b:
         d7:68:d2:31:8f:7c:da:ad:28:7d:a5:cc:95:f2:2d:d5:f6:37:
         f0:5c:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:52 2025 by rpki-client