Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          TAMYu+bKqB4YQttmyzkht1Q1+r6lJ4za0aQLuVcSVY0=
Subject key identifier:   49:C7:77:59:C0:55:5D:DA:7A:2B:BD:3C:A5:F7:28:0F:F7:3B:40:F9
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       3FB51464FC2D5668F6E64EF24BFECF2EADB1B9A9
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Fri 28 Feb 2025 00:00:42 +0000
ROA not before:           Thu 27 Feb 2025 23:55:42 +0000
ROA not after:            Fri 27 Feb 2026 00:00:42 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:14:64:fc:2d:56:68:f6:e6:4e:f2:4b:fe:cf:2e:ad:b1:b9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Feb 27 23:55:42 2025 GMT
            Not After : Feb 27 00:00:42 2026 GMT
        Subject: CN=49C77759C0555DDA7A2BBD3CA5F7280FF73B40F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:a4:ee:c2:d3:9d:57:b4:67:7c:35:f6:35:
                    76:37:f0:5a:3d:d6:87:c0:40:d2:f7:c2:70:a8:66:
                    10:17:7e:76:55:83:5a:c9:aa:93:d9:a0:c2:c0:ef:
                    25:79:91:32:5d:57:6c:a9:62:7a:9b:cb:65:69:4f:
                    25:e3:e4:ff:0b:c9:80:84:4f:70:25:5f:2e:5b:c8:
                    73:5f:66:02:10:4c:20:c1:90:3d:fe:44:9d:ad:3c:
                    67:21:8c:a7:7d:62:a3:1a:34:15:1f:58:bf:f9:4c:
                    61:2e:78:bd:f6:d5:49:fd:67:43:f7:b1:cb:c5:f9:
                    b3:46:a6:80:ba:bd:66:44:fb:10:8e:49:55:ca:b3:
                    9a:a3:79:74:9d:19:9a:c3:5a:91:d6:03:b0:88:c7:
                    96:40:4e:e3:c5:1b:8f:c5:2d:9b:68:1e:5a:92:76:
                    96:55:fc:e2:08:fb:e2:a2:52:f7:55:5c:25:0a:bf:
                    04:35:55:01:1c:4a:19:b9:20:ef:87:1d:cf:49:0e:
                    6d:d5:28:39:8c:4d:04:d8:f9:63:85:62:f4:63:04:
                    e7:73:26:5c:83:fe:3b:16:1b:9b:0d:fc:06:d0:ea:
                    43:e4:a5:87:9b:3d:1e:b4:ae:cc:55:47:c3:12:fa:
                    6f:bc:4e:ab:74:f2:53:74:f4:ee:93:93:ef:f7:75:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:77:59:C0:55:5D:DA:7A:2B:BD:3C:A5:F7:28:0F:F7:3B:40:F9
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:66:39:96:9f:17:c9:ce:73:18:60:4c:2d:01:c0:cc:21:
         9a:11:37:4f:f0:71:f8:ba:28:9d:f8:73:93:54:df:65:97:36:
         af:32:10:af:1f:b5:74:dc:71:01:18:52:eb:09:1c:70:b3:73:
         cf:40:a4:80:f5:19:6e:55:e7:0e:e3:c4:23:4f:c9:27:45:75:
         c8:08:ca:f0:e7:91:52:e7:7e:da:a7:7a:72:48:75:75:fd:0c:
         b7:9e:3e:11:76:ed:bb:6a:b7:66:a8:fc:3b:1c:69:75:ee:f2:
         09:34:c3:85:ba:16:c1:d8:3f:d8:38:da:3e:3b:90:c5:d5:e0:
         9c:16:4e:e0:3c:9e:50:5e:ed:ad:e2:ab:3a:bb:cf:95:30:7c:
         d6:d2:e1:39:46:d1:fb:c0:86:3e:cd:21:2b:0e:57:4b:34:48:
         cb:1b:1d:94:1f:6d:f6:4e:31:16:f6:7a:f1:d0:0f:a8:4e:b7:
         48:74:16:d4:1a:02:af:80:01:b5:5b:5a:0e:62:1e:cf:d5:76:
         d6:6b:14:11:bb:b2:92:59:89:2c:7f:54:7f:a2:6a:eb:99:4b:
         20:0c:e4:ce:bc:34:91:22:b4:43:76:4f:66:d2:93:a4:bf:0a:
         97:c3:b9:56:19:93:d1:de:9d:5d:32:4b:12:cd:d6:5d:73:09:
         9b:e3:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:17 2025 by rpki-client