Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a94083eb-9702-3d6d-aebf-ff3ef6f77f34.roa
File:                     a94083eb-9702-3d6d-aebf-ff3ef6f77f34.roa (raw, json)
Hash identifier:          1p2iHszUqCs5OKIIUY5rzzd8Ov5k0iq+2+11a5DTltQ=
Subject key identifier:   3C:9F:DC:77:20:9A:73:3E:28:96:08:94:77:A4:1B:92:07:4B:EF:87
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346F50FD1736BBC0D16368
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a94083eb-9702-3d6d-aebf-ff3ef6f77f34.roa
Signing time:             Sun 09 Mar 2025 10:21:09 +0000
ROA not before:           Sun 09 Mar 2025 10:21:09 +0000
ROA not after:            Sat 07 Jun 2025 10:21:09 +0000
asID:                     15321
IP address blocks:        216.209.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6f:50:fd:17:36:bb:c0:d1:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:09 2025 GMT
            Not After : Jun  7 10:21:09 2025 GMT
        Subject: CN=7cdb99cf-898c-44cc-8212-c910d3796321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:81:7b:b3:ad:bc:46:62:42:87:80:74:d8:
                    cc:5e:d4:2a:af:24:2d:3e:d5:8c:9a:4a:1e:aa:76:
                    25:97:54:83:be:a6:87:a7:30:f7:65:96:4f:47:dd:
                    5d:fc:fc:c4:14:e7:31:35:50:c1:39:86:0b:0a:db:
                    fd:ec:cc:23:45:ae:e9:65:91:47:75:d7:fe:26:9c:
                    d2:62:1b:f4:86:dd:55:cd:29:a8:3b:20:61:8e:26:
                    34:8e:8f:bd:45:41:ed:06:d6:06:24:ff:5d:bc:38:
                    0b:6a:19:73:f9:45:a0:a7:2d:f9:11:75:7f:60:81:
                    63:03:76:1c:3c:60:ee:a6:21:db:29:cd:e5:91:62:
                    f3:a0:8c:6c:80:b4:99:1e:cf:c9:ee:8a:e9:41:d9:
                    46:fd:16:fe:be:8c:76:8b:05:c0:b3:eb:4a:ca:75:
                    52:ee:ed:67:5c:3b:de:0a:3f:79:22:61:79:38:8b:
                    7d:ae:00:48:50:d6:50:8e:47:3d:67:7c:37:e1:34:
                    12:bc:dc:17:c2:06:10:0f:f3:7c:d2:a4:63:68:23:
                    6e:a7:bd:21:76:b3:dd:1a:b7:7a:cb:15:5d:fe:1f:
                    3b:0e:30:0c:8f:4d:66:9d:a7:b0:61:c9:b3:a9:bb:
                    51:ba:78:a3:bc:0d:70:39:6f:3b:b7:e9:fa:c4:58:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:DC:77:20:9A:73:3E:28:96:08:94:77:A4:1B:92:07:4B:EF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a94083eb-9702-3d6d-aebf-ff3ef6f77f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:f5:e0:9e:12:59:b2:16:77:5e:4f:d8:01:7c:45:29:c4:
         c2:c9:9e:80:87:a0:e1:b3:45:1b:c8:6b:b4:60:dd:7d:c1:47:
         57:f9:f7:1e:01:f8:b9:9e:e3:a2:6d:86:8c:95:29:28:f4:4c:
         ce:c5:6d:1e:f0:12:eb:56:52:18:bd:b8:3a:bd:a6:c0:42:d4:
         51:ba:03:78:2f:80:ab:fe:f8:db:03:2b:4c:85:52:66:7a:dd:
         c2:93:7c:6a:12:57:94:56:a0:85:b7:4c:10:71:af:0d:a0:c9:
         53:6a:e7:c6:df:44:74:c9:c5:86:be:56:aa:eb:7f:38:42:46:
         d0:ac:f6:53:5a:f1:5e:f3:36:25:57:9f:26:11:b2:18:e5:4d:
         5f:a4:38:76:5f:a7:94:cf:cd:6a:6b:b7:75:8e:c8:49:82:8c:
         df:d0:fc:2e:37:19:eb:0d:9c:a1:ac:cd:15:7b:2b:ec:9b:77:
         73:46:39:c7:f4:07:41:50:b7:8a:14:7f:e7:71:52:25:5e:5d:
         85:bb:8c:78:78:54:c4:cd:5e:13:e3:6f:89:a8:09:ab:35:19:
         3b:94:e2:e2:b6:e8:93:7c:dd:a9:8c:da:aa:40:14:7e:45:4d:
         37:ff:89:8e:c4:6f:2c:3e:62:19:3c:72:9e:55:64:b3:73:22:
         d6:25:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:58 2025 by rpki-client