Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/886a006f-7dda-3e2b-ab9f-5fadfc7a7882.roa
File:                     886a006f-7dda-3e2b-ab9f-5fadfc7a7882.roa (raw, json)
Hash identifier:          13FUYlI6JnYWm6/oBeFz6VGJqyn6idpxx44IXcMlOUA=
Subject key identifier:   D6:DF:C6:EF:45:15:23:1E:7D:FE:C9:54:7B:A0:82:25:38:C2:67:02
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F432858480644F7AAB55B915059362100
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/886a006f-7dda-3e2b-ab9f-5fadfc7a7882.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     14618
IP address blocks:        192.111.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f7:aa:b5:5b:91:50:59:36:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=65c06f53-00a8-4e43-ab86-87872645f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:6a:36:b9:b5:1b:28:2a:62:eb:66:fe:7a:
                    b4:1e:14:26:0f:65:0d:38:a4:0f:66:c8:fc:3e:5b:
                    61:1c:f0:53:6a:11:8f:66:c7:88:14:bc:5e:65:c6:
                    c3:d3:44:a3:23:5f:01:82:4a:43:b6:d4:63:0d:90:
                    9d:1b:d2:0e:34:64:72:40:e8:40:98:a9:fc:84:f9:
                    1d:e9:6b:13:54:85:bf:42:88:a9:c1:2f:5a:f4:ef:
                    8f:ba:e2:2f:56:44:12:04:be:ac:81:b9:85:4a:04:
                    7c:a6:00:bc:b3:5b:f6:70:e7:7d:ba:1e:a0:27:f0:
                    b4:51:a4:ea:4a:90:6d:ef:0a:74:c2:c7:f7:55:22:
                    fa:1f:58:43:1b:91:74:2d:3a:0b:af:07:d3:6b:45:
                    5c:4b:0d:b5:ff:a1:e9:4d:40:97:9b:79:4b:e6:9f:
                    9f:b3:35:9d:a5:12:4c:ab:b6:44:23:83:68:e4:60:
                    be:d1:91:18:54:7f:1c:2a:80:e8:aa:28:d4:fe:42:
                    7f:59:fa:d9:9e:4e:cc:ff:77:82:da:67:2d:c3:0b:
                    a3:4d:f8:d2:9a:32:48:13:c8:2f:9f:96:21:46:14:
                    16:b3:d5:51:0b:e1:96:d8:cb:e5:44:30:e7:df:85:
                    ad:7f:d7:22:ea:f8:05:a2:95:f7:2e:6d:3f:7a:cb:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:C6:EF:45:15:23:1E:7D:FE:C9:54:7B:A0:82:25:38:C2:67:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/886a006f-7dda-3e2b-ab9f-5fadfc7a7882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:26:3d:2b:1c:d7:56:51:ea:78:f3:51:bc:e3:04:09:be:c6:
         3f:65:b7:4a:ff:50:06:c6:30:fa:a8:68:32:31:d1:e9:ac:35:
         ec:53:61:11:52:73:29:d0:e8:0e:9e:0f:d6:90:9e:aa:6a:a9:
         10:28:d9:bf:82:12:c0:80:a1:33:56:94:99:b3:ed:c3:f7:49:
         81:ab:d8:a3:f3:6b:42:2a:b5:0a:57:f0:05:5e:d3:23:dd:28:
         a3:94:2e:34:71:2e:7c:6d:17:5d:4e:24:8f:e3:2f:9c:68:48:
         d9:73:b8:2e:c7:63:c1:a8:56:c4:6f:c3:29:7d:48:ad:d8:9e:
         fb:56:4a:4f:48:bc:03:00:cb:80:5e:70:1b:91:14:b1:0b:d9:
         34:88:c1:ec:68:a4:4b:8a:ed:78:72:ea:96:31:13:42:4d:f2:
         fa:23:26:55:ba:11:07:29:7b:5d:47:04:97:58:cd:9f:b4:b1:
         08:cc:79:6a:7a:ac:a3:ed:ba:82:94:6e:64:62:a0:20:dc:65:
         bf:b3:37:8c:b3:e6:5c:53:b0:59:2e:77:fa:18:24:be:b4:12:
         ec:d4:d3:4e:a7:c8:31:a3:38:b2:1b:d9:73:ff:ce:d9:12:87:
         98:08:e1:21:b9:a6:d6:1d:68:60:1e:49:e3:1f:e3:24:53:8e:
         32:be:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:02 2025 by rpki-client