Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
File:                     022d8988-9d2b-32ce-97c6-f993375ebefa.roa (raw, json)
Hash identifier:          QOfv2t9b13nCXEodaFMzxjqMjVaW1eME+6hWGbRUVBU=
Subject key identifier:   EF:39:56:BC:E8:D3:B1:D0:BD:BF:34:FC:5E:34:1A:6D:30:5F:7C:6E
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848388549B37F5489995BAC9D40
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     398233
IP address blocks:        67.214.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:49:b3:7f:54:89:99:5b:ac:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=c8280050-5c85-4281-96b2-40b594642690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:fd:a0:dd:3f:4f:da:b6:6a:ee:15:2d:4f:
                    bf:30:1d:75:b4:f3:94:a0:66:d9:8c:04:f8:55:0e:
                    f2:99:52:b6:c2:12:9e:b8:6b:cf:73:ef:ce:6e:cd:
                    f1:65:93:c8:35:58:03:ea:29:26:98:7f:63:98:b9:
                    f2:ae:e3:da:5a:ba:99:74:fa:07:bb:61:ca:8c:3c:
                    2e:a0:ac:6c:7d:1b:aa:1e:fb:d3:6d:e7:12:6c:ba:
                    15:49:b7:34:e1:36:c3:a7:6d:f4:fb:c6:9e:40:9d:
                    02:df:8a:a2:ad:37:a5:af:47:66:2e:93:8c:5a:96:
                    c9:52:7d:06:e3:e8:83:a0:d3:9a:bf:76:5b:66:f0:
                    7f:21:3c:20:a2:24:50:50:33:7a:54:0d:a1:f8:a3:
                    a0:ce:f0:71:a6:ee:84:0a:cb:ec:c8:37:cd:87:07:
                    12:49:4d:02:7c:d6:a2:42:d2:96:f5:6c:37:9b:8f:
                    aa:d8:57:6e:9e:03:8d:0b:43:62:b3:a2:0f:ca:13:
                    2a:cd:93:06:2b:37:25:c1:79:f2:85:78:7e:35:48:
                    4f:ae:b4:5a:ec:f3:03:75:79:a6:5e:50:ff:32:32:
                    5e:e0:6c:0d:1c:99:ba:82:d7:7f:34:ba:00:dd:aa:
                    1d:5f:a0:a9:c0:2e:9d:9a:43:0a:01:b4:04:1f:18:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:56:BC:E8:D3:B1:D0:BD:BF:34:FC:5E:34:1A:6D:30:5F:7C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:27:d0:c5:00:9b:18:ca:ef:34:5e:a4:25:d8:e1:40:f0:f6:
         a4:e4:d4:2d:99:fe:6b:a8:1c:2e:7d:90:ca:2a:a0:61:91:0a:
         f9:08:c3:7d:01:95:f2:ec:20:ae:85:73:67:63:00:a1:e9:17:
         00:eb:16:28:2d:22:a8:f1:1b:b0:1e:a9:b3:ed:31:28:aa:68:
         30:b2:c9:f3:ae:e4:a5:62:bd:84:d2:89:e2:3a:b8:be:dd:2b:
         00:1a:43:0a:2a:a0:78:30:03:dd:32:dc:75:8c:e0:e0:6a:91:
         97:57:2c:54:c6:2b:9f:0f:b3:d5:cf:72:57:ab:fa:de:90:6e:
         fa:d9:63:6a:57:22:4b:88:35:0f:ee:a4:d9:2a:70:3e:c5:8f:
         bf:bf:2f:3b:51:ca:af:ea:84:e1:4c:94:e6:2d:7a:db:91:b3:
         7b:00:ae:b4:ce:03:f3:c3:99:bb:82:f3:b9:95:8d:e4:02:f0:
         f4:b9:52:09:aa:44:19:bf:7b:78:f1:2b:21:da:28:24:84:a9:
         85:8b:96:c8:09:45:82:1d:0e:68:5c:0a:f0:e6:7f:f0:65:42:
         4c:0d:72:ee:0d:12:ee:1e:14:42:46:9e:e3:56:14:47:f6:fe:
         36:63:29:94:09:26:71:0b:2c:79:05:ae:b8:87:b2:8a:51:4c:
         14:1d:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:01:13 2025 by rpki-client