Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616/d756e6f6-e118-31e9-b665-eb1aac136cc7.roa
File:                     d756e6f6-e118-31e9-b665-eb1aac136cc7.roa (raw, json)
Hash identifier:          hxobN8D92aQ8QvqjrwcPdy9hnr9xUnC69DYL77/c1eg=
Subject key identifier:   F6:07:0D:C4:8D:39:B1:31:C1:59:6E:1A:2A:BD:13:0F:A3:41:D5:02
Certificate issuer:       /CN=d5fec926-f2f2-4348-bb08-512c83d45616
Certificate serial:       010D0C9F432858464D0F0EEDFDDA14889EED3400
Authority key identifier: 5D:B9:13:B1:10:52:2E:13:A0:D3:3E:37:B8:D8:0F:4E:60:9F:AB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616/d756e6f6-e118-31e9-b665-eb1aac136cc7.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        204.128.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:0e:ed:fd:da:14:88:9e:ed:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5fec926-f2f2-4348-bb08-512c83d45616
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=bc4df593-db27-4052-9c1c-21a287a82070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:77:7d:9c:56:9f:2d:fa:05:3e:b7:ff:cb:
                    3f:17:ac:8e:ad:bf:2f:f9:7a:3f:53:a0:02:3d:70:
                    5a:57:c6:23:e7:e2:6f:fc:93:8b:a0:b7:43:05:12:
                    e8:06:13:9e:d3:eb:70:aa:ba:e9:b7:cd:3f:77:c0:
                    d7:a4:d7:96:4d:4e:8b:68:0d:bd:00:33:57:53:13:
                    70:ae:84:14:6c:6b:fe:9d:6a:f3:b5:21:88:77:db:
                    cc:ed:7b:36:9e:4f:57:6d:55:87:98:99:3b:fa:65:
                    0e:24:78:9d:7a:c0:46:cf:d0:53:be:b7:bb:17:50:
                    5f:16:73:34:88:3f:51:05:04:14:2e:34:a8:95:98:
                    3e:cc:b3:4b:47:8b:f7:cd:ef:9a:c6:14:71:96:12:
                    2e:b0:5a:71:02:39:ee:04:82:7e:3f:d4:1f:e4:eb:
                    31:ae:e6:45:79:f2:0d:3e:c0:de:0e:d0:eb:37:56:
                    42:52:f3:8c:5a:1d:56:bf:c6:75:f4:2a:9f:a2:85:
                    ca:70:7c:1b:70:3e:8c:09:93:9c:11:7f:95:55:2d:
                    7a:aa:9f:18:ee:0f:98:f1:22:47:b7:9e:ed:d9:9f:
                    4c:d0:41:ee:cd:8e:7e:12:04:c0:5c:bf:91:b9:52:
                    b5:03:da:62:f8:11:63:58:41:67:75:1f:4b:05:0c:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:07:0D:C4:8D:39:B1:31:C1:59:6E:1A:2A:BD:13:0F:A3:41:D5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616/d756e6f6-e118-31e9-b665-eb1aac136cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616/d5fec926-f2f2-4348-bb08-512c83d45616.crl

            X509v3 Authority Key Identifier:
                keyid:5D:B9:13:B1:10:52:2E:13:A0:D3:3E:37:B8:D8:0F:4E:60:9F:AB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5fec926-f2f2-4348-bb08-512c83d45616.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:7a:59:d1:9d:94:3b:80:15:28:fa:f0:4f:c8:e5:12:1d:
         7b:b4:f8:de:8d:e2:10:c6:e4:01:a7:74:53:49:97:f9:7a:e4:
         ea:9e:60:5f:fb:f6:59:4c:8a:bd:63:9c:9f:3b:9f:c7:a2:99:
         40:b4:45:72:37:fa:5a:de:c3:63:58:89:44:83:9d:fc:e3:7c:
         c1:d3:fc:33:d8:91:ad:55:1a:99:34:79:ac:30:57:c8:a4:18:
         14:fd:51:40:90:4e:cb:3e:1d:8a:86:37:9f:cd:de:5b:ae:3f:
         04:db:c9:25:33:06:bf:96:a3:1e:fb:ce:9a:0a:c8:bc:36:47:
         09:92:24:5d:5d:71:aa:fa:1d:30:93:cf:d6:59:ca:c8:7e:08:
         36:f6:7d:7d:22:5c:ab:48:96:9f:06:bd:c7:99:1d:b2:27:c8:
         25:5e:e5:12:73:4d:a9:d4:f2:ab:c2:e4:5b:d6:30:2b:38:5b:
         db:aa:be:e2:60:db:a1:58:09:98:5c:ad:80:6a:22:14:f2:a1:
         be:49:59:0e:1f:d0:d6:2a:f8:3f:40:64:35:5f:c0:7c:79:33:
         83:f9:55:99:ee:72:de:20:9b:62:d9:25:bb:64:f4:6a:e7:a4:
         d4:fc:84:2e:df:3b:ff:57:06:b1:c2:c9:7d:3b:a0:2f:7e:4e:
         7e:b0:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:01 2025 by rpki-client