Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f1a620-2de4-3bda-ba35-18553e572404.roa
File:                     b0f1a620-2de4-3bda-ba35-18553e572404.roa (raw, json)
Hash identifier:          KxPkm49texjmXNyS3mp4wDiXGI19/NedJl8f4X1r8H8=
Subject key identifier:   73:DD:89:BF:B3:C9:DB:F9:35:C9:05:62:9B:DF:63:67:80:3C:2E:AB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A5633E1D6AE22B2873080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f1a620-2de4-3bda-ba35-18553e572404.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     35911
IP address blocks:        206.47.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:56:33:e1:d6:ae:22:b2:87:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=dfc5acd6-8dfa-482d-908b-d2067c0f0336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:68:a4:cd:57:49:43:ec:dc:05:f1:08:44:
                    94:03:78:ae:44:13:75:fe:ab:31:ec:26:cf:00:f7:
                    3b:d9:3b:32:6e:ec:1f:88:32:07:0a:55:9d:e7:15:
                    6a:8f:f4:e7:be:e1:00:2e:42:17:9a:8f:32:0c:70:
                    b4:df:95:a5:01:f3:f0:45:66:be:ee:40:3b:77:07:
                    05:aa:49:5c:29:bd:35:1c:e1:dc:8b:aa:4a:84:b2:
                    51:a6:e0:16:ee:b9:ef:3e:57:52:e6:18:d4:9b:ae:
                    25:3b:59:2d:57:0d:9f:bd:c5:71:ce:f8:44:43:56:
                    fb:61:6e:03:c9:10:42:0e:be:19:f5:24:67:c6:de:
                    a8:8f:6f:bb:a8:6b:5e:83:25:50:54:0b:ef:0c:51:
                    aa:5c:44:ee:7c:bd:cc:3b:a3:5d:b7:80:e4:fe:07:
                    42:67:f9:49:dc:f1:14:1c:50:60:3c:1b:7f:01:bb:
                    38:6a:04:e1:7f:4b:29:eb:b3:8f:66:55:c7:4f:1d:
                    c9:7d:2c:3b:ad:cb:da:7e:e1:4d:43:1e:00:0a:e5:
                    85:93:e7:c5:6d:26:22:62:1f:2b:b8:eb:23:9c:de:
                    f9:69:fa:5c:18:04:fd:12:4e:24:29:ea:1d:88:f0:
                    21:65:4d:ad:8e:7e:2c:51:74:05:16:3b:75:28:31:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:89:BF:B3:C9:DB:F9:35:C9:05:62:9B:DF:63:67:80:3C:2E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f1a620-2de4-3bda-ba35-18553e572404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:10:f3:06:2c:d2:57:9e:ef:f3:af:df:5f:18:72:e9:c9:12:
         b4:ed:c7:f5:47:09:c2:ba:52:26:23:9e:0a:a9:1e:20:9b:12:
         92:4f:84:6b:11:ad:22:7a:2f:00:a1:9f:7f:6f:98:b7:aa:92:
         ef:fb:a7:53:4c:20:90:9a:3b:7f:08:20:79:92:44:43:ce:fb:
         ec:51:bd:f0:02:c8:cb:eb:16:23:a1:a5:5f:18:ae:89:3c:0b:
         96:19:7e:f3:d6:4f:00:77:cb:b0:80:1a:78:f0:b3:8e:f7:e7:
         64:b4:47:07:14:03:28:21:9e:31:40:12:c6:99:b9:f2:65:c7:
         ea:32:44:82:63:64:5f:16:03:63:6d:3f:eb:a7:e5:62:ae:1a:
         4a:05:0d:e0:25:7e:94:a9:0a:5d:24:47:ab:fd:47:ad:f7:03:
         c3:b8:1a:f5:ae:0f:17:9f:3f:55:6e:30:d2:3c:de:15:02:d1:
         01:e4:d0:4a:3f:42:7e:cb:3a:70:ff:c3:f3:20:21:c3:ca:6a:
         ac:80:89:b3:97:a0:83:23:3a:78:36:fd:f5:a2:87:04:ff:67:
         8e:09:e5:cc:99:73:ea:a9:a9:c6:60:ae:ae:74:86:bc:81:48:
         63:cb:af:63:30:98:89:f2:dc:92:81:18:38:75:54:b4:3e:20:
         e3:36:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:13 2025 by rpki-client