Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa
File:                     2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa (raw, json)
Hash identifier:          vNz+nUE5smjWlUGrnppgfonDHNnpuEpQlFmXKGPALoI=
Subject key identifier:   6A:B5:BC:D4:77:BF:DD:53:57:87:C8:D2:99:2D:3F:EC:5F:7A:0F:45
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584940397D5B77AD0FAE26E65D80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     18434
IP address blocks:        156.55.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7d:5b:77:ad:0f:ae:26:e6:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=39aba0ae-e634-44cb-bfc2-d5a4cb58a221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:e0:2d:7f:54:a8:e0:cd:f7:10:5e:ba:69:
                    d4:6e:9c:c2:4c:c8:55:e7:dc:a6:c0:13:25:8a:43:
                    35:dd:7b:88:91:06:02:c1:42:03:27:f6:bf:b1:1e:
                    b1:e4:b3:06:2b:fa:f8:21:f1:0b:22:97:de:17:a0:
                    4c:a9:8f:55:77:cf:a5:2d:b4:fa:8e:26:a8:55:4c:
                    ce:ff:6f:74:1e:fb:69:69:a1:1a:d8:b8:d3:a4:b3:
                    94:32:c0:6c:de:9f:4a:97:f5:a3:57:29:8a:3f:85:
                    2c:4d:07:df:08:45:c9:8d:41:b6:cd:d9:8e:4a:e2:
                    4d:08:c4:b3:a0:6b:39:0e:6f:a9:16:84:32:41:b0:
                    ed:64:a3:fb:81:af:d7:71:a9:9f:90:50:7e:e5:06:
                    34:77:c5:e8:b4:81:96:7a:a0:ac:b0:41:41:ca:06:
                    b9:d9:77:62:39:75:b3:bc:d0:3d:30:83:2a:b8:f8:
                    38:ba:60:2a:c2:b9:44:f2:d0:bb:a4:39:c4:61:e7:
                    ba:d5:b0:52:fb:45:6e:15:68:b8:9e:08:33:f6:13:
                    e1:a7:53:75:4c:14:3f:6c:91:95:8f:79:26:75:b7:
                    19:36:50:25:d4:97:e0:ef:88:9d:86:22:29:53:31:
                    0d:b7:06:f7:b2:09:64:e7:65:4f:a7:06:17:f9:42:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:BC:D4:77:BF:DD:53:57:87:C8:D2:99:2D:3F:EC:5F:7A:0F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:29:67:a3:a6:13:cb:55:cf:b4:d7:16:a6:53:56:0f:e4:be:
         92:e6:b5:7d:12:91:29:e1:e0:1e:65:79:34:1c:37:a0:4d:33:
         fa:10:38:eb:54:84:40:4c:1d:59:18:e3:ee:1d:80:70:c0:84:
         52:9a:3f:28:6f:88:38:7c:37:4f:b7:61:f0:ca:d8:82:6e:c9:
         1c:b1:82:77:b3:09:99:4c:a1:c6:f2:49:1c:eb:52:92:87:20:
         8b:ec:90:6a:aa:29:e4:70:4e:dd:a4:b2:3d:78:7e:b6:84:ca:
         1b:af:f9:26:05:0c:7c:6d:c8:ec:16:09:10:e7:65:40:27:d4:
         3a:2d:af:56:c9:5b:8e:49:ac:74:77:e3:36:9a:3e:73:2d:c1:
         cf:6e:37:4b:ad:c5:40:20:67:39:94:10:af:5e:41:07:36:04:
         ba:0f:d5:3b:cb:85:41:cf:1e:0e:ea:77:77:84:db:e2:fb:67:
         59:a7:b6:d6:c4:57:ef:de:34:e3:55:3d:79:50:b8:ae:18:ec:
         ec:5a:58:3e:c8:13:88:f1:f0:6a:7d:c1:9a:4e:f8:8d:b8:89:
         61:ec:02:60:c8:67:38:91:e1:57:f9:46:3d:87:3c:40:ed:f2:
         89:ba:b2:81:1b:c4:07:a0:16:cb:1b:76:d0:74:cf:83:6e:9b:
         23:8d:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:07 2025 by rpki-client