Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
File:                     cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa (raw, json)
Hash identifier:          0JHvDROinsjEXVo5pvczyNoUKlWY4efTT36++w4Dm4I=
Subject key identifier:   D9:E9:7F:8C:66:9A:FF:5C:0C:84:83:ED:F0:7C:85:0E:E4:64:F3:BB
Certificate issuer:       /CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
Certificate serial:       010D0C9F432858491D71883D3EA49EC346ACCB00
Authority key identifier: 0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     26824
IP address blocks:        208.79.182.0/23 maxlen: 23
                          2602:fc8c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:88:3d:3e:a4:9e:c3:46:ac:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=04068baf-1bcc-4f96-a433-f91bb919288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:91:19:46:5b:06:51:f3:e4:1d:66:dc:1b:
                    58:0e:99:80:1b:70:2a:78:69:bf:b1:98:e2:7c:0c:
                    37:f1:7a:41:31:d5:94:a4:c7:45:44:b5:45:12:8e:
                    26:37:a0:e5:14:eb:05:16:14:f8:da:8e:59:1a:f3:
                    eb:94:27:5c:94:50:de:ab:b7:05:ef:dd:87:70:d7:
                    7a:36:cb:5f:47:61:92:72:7a:f2:3b:ed:53:5e:53:
                    61:47:3c:f8:46:68:fc:b8:95:0b:48:c5:b5:20:8a:
                    f4:89:f7:42:f0:10:64:58:11:ba:35:96:1b:4b:58:
                    38:97:94:73:b3:dd:f7:89:35:96:90:ca:d4:04:cd:
                    d9:59:d4:5e:64:0c:1d:44:93:bb:e8:85:3c:2b:c3:
                    3a:41:72:6e:fb:e4:1b:ea:8a:be:b8:b8:1c:6f:6e:
                    e1:ff:bc:d9:9c:64:3c:33:f9:c1:85:6b:34:bb:36:
                    b4:53:9a:b7:b7:14:0b:bf:05:71:de:cf:ef:09:34:
                    29:4b:f3:df:66:91:4b:0a:8c:4d:37:7f:a4:7c:cc:
                    f6:bc:84:65:47:47:d6:d0:a6:23:5c:0c:2a:2f:3a:
                    dd:51:2e:8d:71:4d:4a:22:2d:f1:fd:45:2d:7d:28:
                    f9:a7:ae:fc:ae:59:00:89:55:27:da:73:40:99:2c:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E9:7F:8C:66:9A:FF:5C:0C:84:83:ED:F0:7C:85:0E:E4:64:F3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.crl

            X509v3 Authority Key Identifier:
                keyid:0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.182.0/23
                IPv6:
                  2602:fc8c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:63:aa:95:6e:76:20:31:8d:18:8b:b1:c0:47:03:8b:d3:ec:
         d7:aa:4a:f8:be:ff:c6:ca:cb:73:50:3f:75:f5:73:62:26:0e:
         7b:ee:ba:46:fa:7d:05:73:06:62:d4:66:b4:62:85:bf:bb:08:
         82:6d:63:64:8e:d2:6b:31:d3:f6:c6:9c:b6:94:e5:b1:8a:92:
         41:32:38:61:e5:d2:c4:aa:25:b2:ef:8d:35:ff:8a:32:3b:d5:
         c6:85:d7:7d:ff:d6:c0:82:a2:3e:43:8e:b9:91:a7:91:86:96:
         49:8c:d9:0d:38:b4:4f:5f:71:4f:68:90:fb:f3:43:a7:c5:f5:
         85:b8:bd:b9:70:81:ed:f1:9c:4a:a2:d7:d5:5a:c5:a3:13:6c:
         11:63:6c:d4:7e:dd:bb:97:63:b9:77:92:35:30:05:2f:90:65:
         86:af:0e:52:6d:d5:28:cc:ec:a9:b0:ad:fe:18:87:80:c8:ec:
         49:44:c1:0b:1f:3f:11:22:85:d0:5a:ed:e1:9c:c3:40:7d:73:
         d2:44:be:29:ac:bd:5a:8e:aa:b0:dc:81:03:a1:fa:25:7f:7e:
         95:ce:16:54:f7:f0:72:1e:0e:ac:eb:2a:0a:1f:25:b8:47:16:
         9b:e4:ee:a4:c7:d4:d0:d1:14:b7:b5:26:fe:7d:ea:82:ef:29:
         16:8b:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:00 2025 by rpki-client