Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15836c8d-6ff5-398e-b2a5-bded95826306.roa
File:                     15836c8d-6ff5-398e-b2a5-bded95826306.roa (raw, json)
Hash identifier:          eq80uEC7pOFkHQwa8d9AdEZJfsvVhWH77U4PyEpqiMo=
Subject key identifier:   70:19:1F:FE:C4:C3:4D:F6:C4:47:A1:12:8E:B5:99:DD:79:65:99:97
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FFDB3D69FDD14190D8C7BE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15836c8d-6ff5-398e-b2a5-bded95826306.roa
Signing time:             Tue 25 Feb 2025 11:39:45 +0000
ROA not before:           Tue 25 Feb 2025 11:39:45 +0000
ROA not after:            Mon 26 May 2025 10:39:45 +0000
asID:                     30036
IP address blocks:        192.119.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:db:3d:69:fd:d1:41:90:d8:c7:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 25 11:39:45 2025 GMT
            Not After : May 26 10:39:45 2025 GMT
        Subject: CN=571e10ab-c90b-47ef-86ae-6709e33663d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:f6:83:a5:dd:5e:71:ae:65:b8:d1:a5:1e:
                    07:fd:36:e9:0d:bf:2c:28:b6:f8:0d:59:fd:13:95:
                    fb:e4:53:c2:40:62:15:d4:4d:90:58:d8:0e:60:14:
                    36:9d:6a:bf:02:4c:ce:96:0e:64:a7:c6:60:2c:d4:
                    7d:38:73:39:be:78:9c:41:7b:46:ea:55:d4:9c:eb:
                    dd:4e:7f:60:3a:51:52:7b:d0:8e:c0:31:d4:53:e1:
                    20:54:17:c9:63:25:71:2b:20:23:1b:bc:86:b1:4e:
                    70:c6:d0:ac:4d:bd:3d:0a:4b:8d:af:89:42:d0:34:
                    26:48:74:63:03:24:57:f1:58:7a:02:d2:f1:65:ce:
                    82:7d:6e:53:18:28:38:b7:81:a6:4a:58:03:93:a1:
                    03:b1:9f:90:17:4e:b8:e9:57:bf:01:e1:bd:fb:36:
                    1d:d3:f6:c0:c6:19:10:ba:bd:ed:64:dc:35:97:96:
                    66:7b:61:c6:5c:8e:de:cb:4f:d9:d5:e5:87:22:5f:
                    f3:da:b2:84:4a:2b:b2:66:2b:40:c8:d1:3c:ff:df:
                    75:a4:4c:c9:ef:5d:e5:f3:4f:4b:69:87:e3:85:08:
                    3b:b7:35:90:2d:28:7e:92:3b:cf:8e:be:35:0c:84:
                    07:8b:61:b0:34:23:fa:8e:03:ab:90:df:99:c3:0c:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:1F:FE:C4:C3:4D:F6:C4:47:A1:12:8E:B5:99:DD:79:65:99:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15836c8d-6ff5-398e-b2a5-bded95826306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:f3:ed:39:35:a1:ea:d1:be:40:2e:03:66:82:e1:d2:e5:
         d9:dd:ed:7d:29:db:bd:5c:ab:f4:2a:bb:b9:fe:f8:c7:4b:50:
         b9:62:b2:9f:7f:f6:84:6b:99:94:7b:ab:bb:95:44:c1:48:fb:
         e7:4b:5b:fe:17:dd:ce:0b:b6:5c:6a:1c:7d:0d:c4:02:eb:06:
         da:b3:a6:de:d1:49:9c:14:11:25:a5:ff:0f:45:05:50:b4:34:
         f0:54:a9:45:ee:05:41:3a:db:ec:8b:9c:5b:9d:d4:cb:e2:c0:
         c4:e3:3e:c6:40:ba:a9:d9:02:ca:a9:92:20:56:fa:7d:30:17:
         f5:6e:18:7e:b3:02:43:bb:49:20:6f:db:5a:34:c6:05:55:ef:
         4d:76:d1:90:3d:83:df:6f:cf:b5:6e:a4:61:4e:bc:cc:6d:91:
         cf:e4:50:de:31:4c:7d:82:27:68:aa:35:40:43:92:01:b7:b3:
         c1:7e:71:20:66:85:0c:50:ef:09:2d:e3:0f:e5:23:67:0a:8e:
         4e:f8:2e:a7:81:b1:0b:b3:d9:e7:62:d3:e5:b9:19:1c:80:80:
         af:c6:dd:8a:d1:5f:d0:44:44:3b:9d:a8:a8:7f:ea:64:67:51:
         5a:91:79:72:bd:03:cd:65:ce:63:31:3a:13:b1:9a:d7:db:43:
         fc:e3:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:13:43 2025 by rpki-client