Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67192bd1-1f79-3e94-8ef0-19487732ba1e.roa
File:                     67192bd1-1f79-3e94-8ef0-19487732ba1e.roa (raw, json)
Hash identifier:          6ozJoYtMtxoZ6atrN4joJXNuZJTwTjbE77Veted9b4I=
Subject key identifier:   29:32:D0:19:B7:95:71:64:29:CC:93:D9:99:F8:C4:9B:81:6D:DB:76
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B6C62A210FA4CA9CDB9600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67192bd1-1f79-3e94-8ef0-19487732ba1e.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        206.172.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:c6:2a:21:0f:a4:ca:9c:db:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=5370917b-c42c-48e9-93a3-b71e9d5aba9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:ce:21:43:17:b6:53:2c:0e:73:52:d8:24:
                    eb:fb:09:a9:44:c5:c9:d0:3f:bd:85:73:5b:a6:bd:
                    8d:e1:69:8b:c0:ce:88:ab:55:b8:1d:24:5b:77:8f:
                    69:c1:8a:16:07:71:db:30:1c:55:20:b4:68:4a:25:
                    e7:de:68:9d:52:0d:e3:50:5f:c9:e5:2a:a0:2b:31:
                    b2:b7:11:75:b4:3c:25:09:1d:36:8f:23:d1:5e:4e:
                    59:10:f3:37:0d:74:07:3e:01:c4:4f:d3:49:a1:ac:
                    6b:02:b4:8b:51:72:88:ab:bc:ee:b0:f3:7f:a3:e4:
                    65:b6:71:08:c5:10:69:e9:6a:53:8e:cd:75:7b:b4:
                    c0:d1:57:73:2e:e8:59:03:2b:4c:91:0d:8f:11:f2:
                    cd:ba:da:52:79:20:ab:0b:af:9c:8f:0f:5d:c6:54:
                    62:f5:6e:e8:58:5f:72:e4:58:42:bc:dc:c6:42:b2:
                    b6:68:20:ce:ea:a6:1d:36:a7:ea:04:6b:76:68:30:
                    2a:e9:ff:3b:e6:9c:d7:d7:24:de:12:df:f2:23:41:
                    12:c6:7e:45:fd:b1:49:37:b8:84:99:a5:ca:49:d1:
                    8a:91:84:89:65:13:71:1b:46:ea:5d:34:c8:ce:39:
                    59:3e:41:71:b3:b3:13:1f:eb:2b:01:b6:1a:88:55:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:D0:19:B7:95:71:64:29:CC:93:D9:99:F8:C4:9B:81:6D:DB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67192bd1-1f79-3e94-8ef0-19487732ba1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:9b:2d:62:ce:4a:1e:68:62:d2:00:43:99:e4:c3:13:67:
         dd:2d:28:45:d5:c8:86:61:f0:64:94:60:8f:ba:28:3b:8d:4b:
         31:17:4b:7c:4f:63:80:e4:95:13:23:fd:55:44:63:6e:78:e9:
         5d:94:8a:fb:cd:95:d0:7e:53:b0:bc:a9:30:e8:51:2a:45:a5:
         22:38:af:27:c0:7e:44:98:d9:36:4c:41:79:60:d4:42:48:7c:
         41:0b:e6:e3:e2:1f:63:db:0b:2e:7f:72:1a:6b:f5:37:4f:4f:
         12:8e:de:be:7a:97:ad:8c:64:1e:6e:ed:0f:82:71:96:a6:3d:
         4a:c5:92:b2:de:b0:e7:6f:66:fd:7b:ed:17:74:bf:21:de:47:
         04:e0:0f:cb:51:a2:42:02:68:f6:76:5e:8f:24:79:68:9b:16:
         e6:d0:aa:7d:c0:9e:59:29:eb:98:25:61:32:d7:0b:e7:b9:29:
         10:47:fa:25:07:c3:f2:bc:23:0b:23:1c:ac:8d:ff:e9:b7:ee:
         ca:41:03:f2:aa:11:98:d6:2a:ba:27:d9:99:be:66:ab:35:be:
         82:6a:d3:e4:95:ad:31:ff:2a:c8:6b:0b:c1:50:6d:7c:1d:85:
         ef:31:f3:8a:73:ef:a0:1f:43:fe:a0:12:87:dd:62:f3:3a:1c:
         84:b1:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:30 2025 by rpki-client