Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa
File:                     12349ba3-a81e-343e-ad1b-3113628be398.roa (raw, json)
Hash identifier:          8JKdItBTvo16so/Nb9K1sGO7Jq449/b/P3O2vRQoeFU=
Subject key identifier:   71:CE:23:F5:96:5B:39:85:62:83:09:2E:2D:C8:03:FE:33:94:60:AC
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848BBBB7E6F6897AD2AB08B7780
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     3561
IP address blocks:        206.98.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7e:6f:68:97:ad:2a:b0:8b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=485abf1d-8352-4034-932e-8f03e352c5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:9c:3b:37:e7:fd:07:61:d0:c9:76:29:5a:
                    d7:c4:45:bc:c1:24:80:c0:7a:37:05:2f:1a:ae:2b:
                    d7:51:59:9f:ff:66:65:1b:f2:f0:d8:2d:4d:5a:77:
                    33:ed:d9:c8:e1:64:be:42:64:d8:30:a9:a8:b6:05:
                    2f:2b:35:29:89:98:8e:f0:17:8c:6a:56:92:a6:7b:
                    31:2d:03:3e:27:fe:04:84:c7:3c:08:27:27:74:1a:
                    d3:e0:8b:f6:93:38:97:57:1a:5e:82:be:62:2f:7c:
                    07:ad:37:62:c1:2f:6b:e9:07:21:14:13:86:cf:e0:
                    87:80:d1:69:a2:52:10:a3:c2:57:f0:68:c3:de:c1:
                    96:dc:3a:8c:af:c7:0f:1a:51:9e:1e:3a:e3:45:43:
                    2b:85:c0:08:1a:d4:22:f2:56:5f:a4:36:25:0f:9c:
                    e4:3b:01:00:26:ad:fd:9f:5f:0a:80:22:77:7c:a9:
                    13:e0:2d:68:25:55:65:01:b6:7a:62:f8:f7:4c:4b:
                    47:28:2c:71:46:af:db:b1:11:ef:8a:5c:de:18:09:
                    03:14:0a:91:0b:26:f7:8e:6f:fd:4c:ec:af:4e:4a:
                    8d:de:aa:85:a1:1b:95:de:81:ac:21:8e:5b:38:a3:
                    18:8d:86:16:25:44:c7:df:2b:bd:3a:f7:08:cb:d5:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CE:23:F5:96:5B:39:85:62:83:09:2E:2D:C8:03:FE:33:94:60:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:83:29:ff:10:6c:d4:fa:a0:1f:6b:f3:4a:31:5f:8f:2d:ac:
         d2:46:bb:3d:6e:94:af:ec:cd:31:43:1c:02:14:df:07:99:1e:
         20:1c:ee:e8:d4:cd:36:99:b8:6a:d0:9f:e5:c2:c1:64:97:d8:
         7c:09:61:30:a8:bc:76:35:89:73:6e:b6:c2:07:8c:58:da:98:
         81:39:3f:81:40:a6:d3:46:fb:c1:23:70:be:b3:e7:35:53:d0:
         0a:9a:0e:30:2e:57:34:b9:ce:c0:aa:74:11:aa:b3:bd:da:03:
         0a:77:34:70:9f:9a:c2:fb:0e:5a:fc:c8:2b:c1:02:4b:3d:96:
         dc:8b:66:fb:bd:69:00:bc:93:45:c8:62:cd:62:63:ef:87:94:
         58:05:47:06:53:aa:6b:ae:bb:5c:20:49:3e:62:39:6f:a7:75:
         19:3c:68:a0:1f:9e:5c:34:5c:3b:89:7f:f9:07:e3:b8:a6:e2:
         60:a5:5b:41:44:af:b5:ba:74:57:23:e3:84:21:25:63:af:a2:
         ef:d6:aa:c3:c0:fa:ed:1b:9f:ce:e7:36:b4:1d:31:d1:49:af:
         a5:8f:68:87:da:3e:45:8d:23:31:67:c6:c3:98:9f:2e:2f:b8:
         34:ca:f1:48:a4:58:af:f2:3a:fc:24:99:5b:2c:9e:ae:a7:af:
         d7:2f:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:02 2025 by rpki-client