Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa
File:                     18085e4c-06d9-3646-a69d-aded2ef7ca30.roa (raw, json)
Hash identifier:          vRLZBe9en0kinHZ6vgyp4yrX4ZlfqUsvDMoueugUMxo=
Subject key identifier:   5F:EC:08:4C:F9:00:A1:17:CF:F7:EB:61:5A:67:BB:38:E6:1A:36:C1
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F432858480BDA73ACDC8E64F128B8CFD4
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     22711
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:73:ac:dc:8e:64:f1:28:b8:cf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=7eddc295-ee06-4fcf-a0f6-59a6a2324a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:1f:3c:91:bc:b0:bd:19:e6:e1:7c:9d:95:
                    1d:2e:db:16:55:70:6b:64:85:bd:ca:a5:94:61:4b:
                    f6:5b:9d:57:6e:5d:78:a5:f5:de:88:9d:d2:82:cf:
                    07:dc:39:c4:e7:69:6a:e8:ee:d3:1f:d9:8d:c0:a8:
                    dd:d1:eb:3b:84:a3:30:1b:3f:39:c5:20:9f:e2:aa:
                    08:d3:b9:b0:de:82:19:02:82:d0:1f:30:4f:11:9e:
                    a5:7b:e7:5c:9c:71:e3:98:e1:17:b5:f9:2f:48:59:
                    2d:b3:db:a1:54:c8:d8:a6:07:a8:b5:50:4c:89:4c:
                    9a:53:6b:ba:29:89:8c:15:62:d9:6d:97:0f:d6:20:
                    09:50:8b:c4:49:6d:6a:29:20:72:96:0d:17:25:ca:
                    f7:f0:9d:dc:4c:c3:8e:f2:42:d3:ae:22:77:f3:cd:
                    13:11:e3:0c:82:53:f5:45:ab:48:71:d9:e0:0b:e1:
                    06:99:c2:23:cf:81:65:f6:95:82:6b:fd:38:27:64:
                    ef:47:2e:b0:46:6e:97:d7:44:51:ec:d1:e7:ae:94:
                    72:23:22:c2:0f:bf:37:a2:96:23:c5:f6:f4:a6:6c:
                    22:c1:06:e7:ce:d7:9f:e1:97:59:af:6a:1a:d0:80:
                    d4:68:2e:cf:07:64:92:c2:10:5f:82:c6:f9:64:4d:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EC:08:4C:F9:00:A1:17:CF:F7:EB:61:5A:67:BB:38:E6:1A:36:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:a4:b5:48:d5:b4:6e:25:59:e1:72:e5:27:dc:94:e2:b5:
         09:0d:75:a8:32:b3:d4:77:18:ad:6e:90:ce:f6:fb:e6:fe:33:
         ed:e3:dc:f3:d7:d0:be:70:4e:6d:bb:fd:48:9f:55:c6:3d:b4:
         e6:44:df:40:db:d6:15:c7:3d:58:46:89:44:b4:ae:73:c1:9b:
         de:19:95:7c:bb:19:e1:cb:05:49:87:24:10:ad:44:39:93:7b:
         32:57:81:c0:16:51:4c:57:82:97:0b:28:98:79:ae:a2:1d:66:
         f9:88:18:e9:86:6c:85:ed:ca:1d:e6:1d:e9:b1:39:ea:53:ce:
         21:01:99:58:05:1f:a2:55:7f:7d:54:16:84:f9:a8:e5:77:aa:
         db:3b:2b:95:ac:88:17:3e:89:90:1c:7a:12:46:4a:0d:75:91:
         74:e6:d4:68:54:fe:fb:fa:ed:5a:e0:87:44:3e:5c:34:19:95:
         df:73:ac:fd:c1:d0:9b:8c:a7:75:61:59:47:59:7e:c9:7b:2a:
         9d:76:97:22:c9:ac:ec:3d:e5:ed:e1:47:76:46:fc:a4:8d:c4:
         da:d2:a9:b2:50:0f:cb:3a:d0:ab:f0:38:fe:59:57:86:a5:b7:
         eb:dd:0a:ec:4d:9a:0c:10:7d:7f:a7:03:e2:3c:38:88:50:71:
         6d:f1:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:42 2025 by rpki-client