Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/26c62daf-e027-3635-a80c-bc01cc6378f9.roa
File:                     26c62daf-e027-3635-a80c-bc01cc6378f9.roa (raw, json)
Hash identifier:          7cxXlvdjB6afmoSbI7VOUaY7PsLrtX9nHzrc6WW/GBc=
Subject key identifier:   18:EA:39:5B:41:B3:6C:D6:97:EE:3B:55:2A:26:BA:C7:0D:68:1D:9E
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F43285848E59BCA0898BB475BBD908E20
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/26c62daf-e027-3635-a80c-bc01cc6378f9.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        204.110.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:ca:08:98:bb:47:5b:bd:90:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=cc2d55e3-c1c8-42c6-b398-cfe8a4959351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:fa:c2:ff:63:f6:c0:80:73:d7:4b:fd:bf:
                    c5:87:81:ee:04:9c:31:88:f2:01:d1:8f:cb:b1:2e:
                    ef:f0:cf:53:64:66:3c:75:69:d4:ef:dd:9b:be:a4:
                    13:54:03:8b:12:d5:af:c4:07:90:73:07:75:86:d2:
                    55:eb:fc:c2:bc:69:5f:95:82:c9:ed:a2:40:38:5d:
                    bf:62:f2:ed:ae:12:c7:eb:e8:54:81:92:ef:ca:5e:
                    e0:a5:90:40:64:02:37:4e:0e:5a:da:d9:a1:db:3a:
                    d9:b8:5b:b6:3a:d9:9d:7c:6f:cb:b1:e1:0b:7f:37:
                    8d:48:b8:e0:3f:5c:83:84:0c:89:fd:55:68:6f:5a:
                    c6:52:b1:23:fc:19:a0:62:de:1d:80:b7:96:76:cd:
                    68:9c:8c:55:7f:b1:0b:6b:2f:6e:78:57:47:b0:ac:
                    ca:d7:93:36:5f:96:19:17:7e:83:4d:f7:92:a9:1f:
                    a5:a4:d0:2f:52:2d:79:9d:ba:9a:93:76:50:47:05:
                    1d:26:dc:6a:df:59:df:d4:bb:01:3e:4f:e7:5e:14:
                    04:2c:a6:c8:b9:ba:5c:8b:d6:ee:c0:94:e4:d9:e3:
                    29:14:eb:4c:0d:aa:06:d0:17:41:33:ba:30:b3:e6:
                    c2:00:fc:94:90:00:6f:1c:23:69:fd:0b:80:6b:7e:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:39:5B:41:B3:6C:D6:97:EE:3B:55:2A:26:BA:C7:0D:68:1D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/26c62daf-e027-3635-a80c-bc01cc6378f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:ae:70:36:d7:9b:d5:ba:d6:8d:7d:54:71:0e:71:aa:01:
         fd:6f:dc:e7:ad:cf:9c:29:cf:9a:04:de:37:2f:99:4c:24:3f:
         29:13:7a:e9:cd:72:21:2e:ae:cd:6c:4f:06:e4:f6:0e:a2:58:
         ba:4d:7d:7d:63:1d:b6:29:1a:61:0c:8b:e0:7c:41:66:3e:62:
         af:0b:0a:29:0a:f9:55:5b:a9:f3:7a:77:3a:c9:d6:fa:5b:48:
         f8:d5:2a:a7:50:a4:13:7d:e1:44:e7:cf:4d:96:fe:1f:a4:93:
         b8:6d:a0:f1:31:a7:25:15:e3:59:94:78:3f:1b:d2:cc:f7:ff:
         4d:b1:28:39:48:11:ce:83:d7:98:99:f4:46:de:af:28:f5:6e:
         fb:e9:ba:4d:62:38:38:12:21:e2:7a:ed:e1:bd:2e:dc:8a:3c:
         93:c2:5a:f8:c6:a7:e7:de:be:71:7a:88:0c:3c:a1:0f:19:ec:
         9b:a3:24:ec:87:00:1b:5f:a4:8d:4b:07:d2:06:bb:85:5d:38:
         df:ac:7b:5c:16:75:dd:65:7e:d5:6b:f8:80:dc:21:b2:7a:2a:
         76:85:de:50:7f:c9:89:eb:74:1e:c0:7b:5c:41:e1:ad:a6:45:
         af:47:6f:d5:5f:f9:9e:34:2e:7b:83:28:66:9e:d4:22:91:6e:
         12:e2:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:08 2025 by rpki-client