Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa
File:                     95e7c803-11e5-34eb-84fa-379ee98b58d3.roa (raw, json)
Hash identifier:          zcmXgw4PQWwnixBQR9Yw3oJ4RIe5LnkMrnHSN9OH85Y=
Subject key identifier:   1E:86:3C:67:A2:E5:55:00:B2:AD:34:D4:D8:31:F9:38:CC:CE:27:93
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F432858481C9A806258FCA65869864780
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        208.71.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:80:62:58:fc:a6:58:69:86:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=978f673c-3b3c-4f36-850c-09363b2891cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:a1:c4:09:21:50:fc:82:3e:d3:c5:d9:64:
                    4c:ac:12:ae:60:4e:30:5d:90:03:bc:7b:58:0b:5d:
                    82:94:e0:d7:17:f4:3a:5a:23:5b:ef:84:1a:ac:52:
                    e0:46:71:68:37:05:bd:46:b0:4a:09:b0:ba:e7:61:
                    30:39:49:7b:47:b5:7a:53:2a:eb:3a:e2:c4:e8:76:
                    ed:ab:f9:fa:32:43:fc:9f:22:59:64:ff:38:68:dd:
                    bc:e8:0d:05:94:34:ef:9e:d5:d6:2a:01:f8:90:a7:
                    8a:b0:19:ee:3f:d3:eb:64:58:02:cc:d5:ab:3f:8f:
                    7d:8f:91:6a:81:bb:f6:aa:f3:53:3a:32:7b:13:49:
                    e2:df:e2:89:71:1f:0c:c1:6b:7a:5b:6b:1a:14:ea:
                    bb:ef:ed:aa:2c:ea:e6:f5:f1:e7:5b:11:41:6f:4a:
                    24:4c:df:2c:0d:be:8a:55:4d:03:82:c8:dd:36:34:
                    6f:91:e5:f6:9c:c6:2d:68:eb:0f:08:e5:e3:90:18:
                    1c:91:fb:e5:08:0b:d7:d0:e1:30:ce:fb:26:d6:39:
                    95:b5:75:0a:40:81:ff:63:11:02:46:97:27:3c:8e:
                    68:95:9f:d6:22:d3:f5:7f:9e:71:35:77:a2:4c:98:
                    d7:f0:5d:25:20:e3:b9:41:97:65:d4:a6:14:1a:43:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:86:3C:67:A2:E5:55:00:B2:AD:34:D4:D8:31:F9:38:CC:CE:27:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:cb:27:2d:0c:85:e2:97:9f:5c:ee:ad:27:cc:96:2b:e2:
         df:49:2d:81:be:84:0f:16:5b:7d:d7:e8:00:24:7a:56:6a:97:
         e5:72:29:2f:76:ec:bf:b2:10:3b:e8:e5:00:d3:fa:b1:43:92:
         5e:dd:53:b7:7c:c9:8b:57:44:1c:ac:9b:96:06:b7:a4:3a:53:
         f8:6b:22:bd:35:b7:73:6f:bc:11:3c:c9:46:70:f1:25:35:b3:
         16:88:1d:9b:56:77:e2:b1:cd:be:2e:0f:7d:34:24:66:36:86:
         b4:cc:63:fd:f0:32:2f:7f:13:d7:73:b0:93:59:79:ee:0f:76:
         8f:81:b5:aa:15:70:75:f7:0a:3b:07:a0:d0:06:51:83:c1:8e:
         94:5a:25:06:ad:d9:c9:0f:56:db:3a:50:55:f9:24:25:13:e9:
         a7:51:e2:33:62:73:b5:fc:2e:2e:1d:9b:90:c1:ab:b8:99:1c:
         2c:05:80:61:58:4b:2a:6f:57:eb:da:6f:71:22:54:19:0a:04:
         96:2e:bc:7e:1c:36:63:d1:33:bc:eb:1a:14:47:b8:bf:99:b3:
         1e:55:6c:20:fc:0c:ba:f8:0e:1d:a5:05:06:cd:4c:fa:2b:fc:
         df:37:e6:07:1a:ce:18:fc:39:d3:7f:58:a9:8d:d5:3d:b8:c5:
         b7:1f:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:11 2025 by rpki-client