Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/836c14ca-62f6-301e-a6fd-849ce77331d5.roa
File:                     836c14ca-62f6-301e-a6fd-849ce77331d5.roa (raw, json)
Hash identifier:          rvjSSv9L6k5Zi4/wLdXHVG/A6yxk+4sloUdCuzxQG4E=
Subject key identifier:   27:C4:F3:77:56:30:2F:78:B2:57:6F:64:1C:72:7E:4E:37:37:8E:AB
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F43285848C150CD517080B1B6DD731500
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/836c14ca-62f6-301e-a6fd-849ce77331d5.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        216.71.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:cd:51:70:80:b1:b6:dd:73:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=101b7ad3-1b6b-4760-b7b1-d32a028c6561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:f2:0f:4d:af:99:5b:88:e7:ee:08:08:d7:
                    8f:fa:7c:88:2e:ef:47:98:09:29:0a:19:85:57:c4:
                    22:a8:02:7f:58:da:23:f6:e7:e1:7c:ef:46:cd:c9:
                    80:56:62:3f:6b:34:5d:32:ad:51:6f:63:75:39:58:
                    2d:4a:9f:d6:66:8f:22:bf:29:2d:0e:bc:ab:3f:58:
                    c0:bb:7e:3e:4a:d0:8d:72:5d:b4:4e:93:4c:9d:ce:
                    0a:0b:17:d0:d4:21:b4:9f:0d:8a:89:0a:dd:ee:8e:
                    78:4b:30:68:62:95:6d:79:f5:2c:42:b1:5d:32:50:
                    76:7e:a8:47:ab:2b:4e:46:9c:ef:16:ed:66:95:23:
                    78:51:aa:6b:aa:c1:9b:d3:f2:80:57:75:1b:d6:c9:
                    e5:51:32:b8:c6:02:2d:d9:58:37:42:dc:bc:ca:9e:
                    76:48:29:ba:87:c6:ff:15:5b:d9:34:a8:30:5d:70:
                    a9:82:ac:4c:22:df:d0:6e:d8:d4:20:bf:de:a9:05:
                    7c:98:30:08:1d:59:3b:52:ab:bd:46:94:45:4d:92:
                    b5:ca:26:b4:54:f9:92:41:89:3d:30:8d:ad:44:b8:
                    77:ff:d8:d2:3e:93:c1:8f:92:9c:c5:2c:c8:06:2a:
                    ff:0e:45:d4:a3:9f:e8:38:96:9a:56:f9:aa:34:a8:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:F3:77:56:30:2F:78:B2:57:6F:64:1C:72:7E:4E:37:37:8E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/836c14ca-62f6-301e-a6fd-849ce77331d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c3:f2:24:95:26:ad:33:7b:d9:bf:18:5a:1b:f0:d6:33:0c:
         02:ae:f6:fe:cc:6d:a8:4d:5e:29:74:79:91:cb:02:39:c2:ef:
         b7:4e:f6:50:3e:d9:12:11:56:47:60:71:92:e7:e1:05:88:eb:
         08:9e:bc:18:b5:10:5a:24:42:26:dd:63:b7:b0:9d:0f:ed:6a:
         6c:0d:13:8f:3d:f4:fe:4c:be:57:dd:d9:e6:8f:83:65:90:fc:
         24:e9:da:84:aa:ce:05:09:82:14:af:e5:8b:0a:30:a9:e6:4c:
         60:be:09:2f:b7:18:4a:ab:ae:f6:21:63:dd:1c:15:01:51:86:
         eb:5c:3b:e2:2c:6c:90:9f:f0:87:60:08:da:05:c0:3f:f9:e9:
         b1:e4:ea:84:4e:2a:b6:b2:9d:a4:af:dd:29:dd:da:77:6a:0a:
         6d:ef:3a:67:4b:ac:3d:40:41:db:97:62:51:b6:28:5b:d1:13:
         d9:a8:25:71:40:6b:ac:f2:70:6d:fa:f2:e2:24:15:61:3d:f6:
         f5:5c:9d:03:7a:07:d1:09:cf:96:44:ac:ea:98:06:4a:db:b1:
         a7:d8:2d:2a:e7:77:02:61:01:44:b3:41:8b:17:47:1a:39:05:
         6f:1a:b1:bf:18:19:80:e0:5f:de:1a:58:ce:41:05:44:c9:91:
         f6:61:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:14 2025 by rpki-client