Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5de34a5c-c7a5-36ce-ba17-be366b71f541.roa
File:                     5de34a5c-c7a5-36ce-ba17-be366b71f541.roa (raw, json)
Hash identifier:          IHrIlKP9wKDICVuRcqOm6Tznn3aMjIDbxvo8fWABpLs=
Subject key identifier:   34:78:79:D2:4C:54:39:5C:10:DA:3E:41:C0:99:FA:0D:42:45:4E:E7
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F43285848B2F91DFC2BDE84DBB0D5CA10
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5de34a5c-c7a5-36ce-ba17-be366b71f541.roa
Signing time:             Tue 28 Jan 2025 22:42:43 +0000
ROA not before:           Tue 28 Jan 2025 22:42:43 +0000
ROA not after:            Mon 28 Apr 2025 21:42:43 +0000
asID:                     54004
IP address blocks:        206.251.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:f9:1d:fc:2b:de:84:db:b0:d5:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Jan 28 22:42:43 2025 GMT
            Not After : Apr 28 21:42:43 2025 GMT
        Subject: CN=eb5f92a7-80cf-4d23-9533-4f9ec95321cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:b3:4b:35:b5:dc:ea:12:29:26:37:f5:8d:
                    7c:37:ef:12:4a:3f:6a:13:8d:8a:68:4d:8f:15:1d:
                    ff:bb:15:4c:d5:cf:df:5b:d7:9a:5a:dd:32:7b:d2:
                    2d:42:b0:a9:af:f3:55:bb:94:5b:1b:ff:e4:9e:4d:
                    3b:1e:aa:09:ef:2b:81:57:5c:ff:c1:4f:ac:20:93:
                    ac:57:89:d2:05:f7:0e:b9:9f:97:60:0b:18:07:ba:
                    31:9b:99:fd:e2:52:19:af:47:59:4b:f4:f5:75:d0:
                    0e:d6:60:fb:e7:b6:31:9b:d6:90:2e:b1:7d:92:f8:
                    17:eb:88:4c:4a:0f:eb:92:e3:5f:81:87:ec:eb:ac:
                    63:da:77:b4:93:aa:c6:c3:aa:d9:e3:f2:51:cb:44:
                    a7:3e:3c:9d:27:42:0b:54:23:d5:25:d7:93:36:05:
                    df:41:ad:6f:1d:e0:18:be:5a:a0:a5:74:c8:71:a7:
                    bb:62:59:fb:dc:7e:84:cd:f5:f5:d2:81:9d:90:4f:
                    35:0e:a9:b0:02:58:22:6d:0d:5a:d9:77:e2:a8:7e:
                    f0:87:a4:18:3f:ff:66:9f:52:f2:7e:de:3d:8b:c7:
                    1a:3b:c0:d6:8a:39:f7:13:d8:f3:f0:bb:a0:a9:37:
                    44:6b:8d:87:39:dd:0d:ce:06:d5:d1:05:b5:4f:89:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:79:D2:4C:54:39:5C:10:DA:3E:41:C0:99:FA:0D:42:45:4E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5de34a5c-c7a5-36ce-ba17-be366b71f541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:df:5e:d0:41:50:aa:49:d1:58:6d:f2:39:87:70:5c:9a:
         6a:67:38:b3:6e:c3:e3:09:2e:e5:48:b4:b4:83:91:45:7e:b1:
         77:7c:32:fe:b6:bc:d7:06:95:12:62:ff:83:db:e9:de:39:55:
         3e:b5:44:17:22:0b:40:29:3f:4e:85:de:1e:46:fa:d8:30:5e:
         90:b8:86:53:8a:0b:90:dc:c6:49:90:56:8b:17:7b:2a:6d:6e:
         59:5a:c4:ed:9a:2c:7d:d9:18:a2:82:04:12:b9:ce:f3:9e:e2:
         5b:16:8f:b9:a8:9c:8e:e5:c7:7c:f4:a0:8c:32:9f:64:cc:c1:
         28:0f:88:86:4d:cf:49:03:38:2b:63:a8:76:c3:f8:3e:12:e8:
         88:69:a3:6e:a0:c2:96:21:6b:db:dd:a7:cc:c7:19:04:f0:ea:
         9b:15:11:00:e7:61:b2:75:de:cd:9a:5a:d7:69:17:a7:9c:52:
         19:0c:0e:71:81:9d:8f:71:f5:ac:9c:a7:bf:ae:84:6d:79:bc:
         5b:0c:d1:10:7c:4b:f9:35:76:29:8b:18:d5:9b:5d:4d:de:01:
         87:5a:be:07:1e:c3:e2:2f:fb:d5:06:24:5f:17:e3:4e:0f:a9:
         da:5c:07:3c:44:14:60:9d:f2:b4:03:c0:2c:b1:30:c1:20:6d:
         0e:71:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:12 2025 by rpki-client