Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa
File:                     55326049-743a-31e2-ab8a-1bfb79705563.roa (raw, json)
Hash identifier:          IWGrXYQiUy5nS2IofALtEmnhIPk4ixtc3wI5zddNRtM=
Subject key identifier:   E6:B7:80:7C:C4:10:73:D6:28:0C:9C:FD:66:45:E6:3F:C7:8E:C2:68
Certificate issuer:       /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial:       010D0C9F43285848143A7EB07EF69C161AC02B80
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     16509
IP address blocks:        216.99.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7e:b0:7e:f6:9c:16:1a:c0:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=36e036e0-7599-4e0b-8505-567d9c7431c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:65:03:55:c7:d4:01:87:d1:0e:30:aa:73:
                    03:34:d2:36:f3:bb:d6:18:6d:73:e2:29:3b:35:69:
                    e3:71:05:bb:5c:25:91:6d:1c:9e:f5:7c:09:c2:5c:
                    a2:f3:cf:a8:2f:43:49:d8:3a:34:e1:9a:e2:0f:d3:
                    78:46:41:3e:97:88:d8:d0:fb:0a:1b:5a:51:c4:ff:
                    44:fc:6c:73:2b:6b:ef:e5:8f:f6:08:57:f2:eb:90:
                    80:a6:b3:14:c8:30:d5:c1:36:9b:27:b7:75:47:a1:
                    a2:01:75:78:77:21:0a:5b:db:4b:b5:a4:5d:3b:dc:
                    02:31:79:03:1e:9a:9e:2b:13:a9:4f:c5:09:27:00:
                    45:e4:7c:ec:09:dc:38:e8:e8:1d:f9:46:78:b3:05:
                    6f:1d:2d:b8:34:96:a3:a4:c8:73:64:81:27:05:23:
                    d1:f1:82:05:9e:16:81:19:bc:35:17:d1:b7:51:07:
                    92:76:d4:37:76:48:ab:ed:35:ad:96:61:f5:1d:71:
                    44:0c:ae:55:0d:fa:f1:b4:2e:9c:90:3c:3c:e8:1b:
                    6a:b0:36:3d:ba:d9:3e:37:52:b6:63:dd:80:75:e3:
                    86:19:ca:3d:19:0e:fe:cf:7a:c7:f2:db:64:ea:ca:
                    fb:54:a5:39:2c:08:b1:0c:50:36:9d:84:9c:ce:b9:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:80:7C:C4:10:73:D6:28:0C:9C:FD:66:45:E6:3F:C7:8E:C2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:cd:a0:3e:1a:f2:40:39:ae:e5:ca:c6:47:73:c6:84:95:
         de:d4:84:46:fb:33:cb:71:13:c5:3d:d9:78:f9:bd:34:4b:d3:
         8d:70:13:87:22:c3:0a:8f:41:0a:c1:6c:78:67:95:d9:d9:5a:
         4e:5a:42:b3:cb:20:ae:d9:7a:cf:3f:79:e9:61:0f:04:95:df:
         b4:45:0f:51:eb:10:e3:11:16:55:c4:db:ee:8c:64:6e:90:5d:
         1d:ca:a8:01:37:ba:b7:fc:e5:53:9c:07:ae:20:98:bb:b5:8b:
         a6:a7:74:56:9c:98:32:4a:0e:fa:d2:f2:c6:72:5d:60:e7:5c:
         58:d9:77:ee:b8:c1:0f:80:77:ef:b7:60:a2:6b:fa:d9:2a:1b:
         cc:46:14:4b:80:34:e6:f3:a6:78:a6:27:86:6c:56:35:c9:f0:
         18:80:bf:6f:04:da:26:a2:de:b9:3a:b9:13:a1:98:2b:7e:7b:
         9d:bf:0e:c8:b6:84:77:2f:65:7d:8f:25:b4:f9:8e:e6:bb:09:
         65:23:23:bd:92:e6:e5:e6:cd:df:d4:10:55:17:0a:c4:33:23:
         f4:6f:42:09:b7:22:89:6a:85:be:7d:d3:9e:a2:6e:02:54:a1:
         02:fe:82:ea:d5:16:14:e2:87:a0:bf:8d:cb:59:b1:01:f3:0d:
         e3:4e:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:04 2025 by rpki-client