Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28bdab30-a085-357b-8c3f-93815890b22b.roa
File:                     28bdab30-a085-357b-8c3f-93815890b22b.roa (raw, json)
Hash identifier:          bzETwUSA3eF09ltdvxrAlDgPLK8zPEgJ6Rn3PzYYxj4=
Subject key identifier:   87:8E:37:A3:14:1F:E5:CB:3C:C6:37:83:9B:64:BA:EA:B8:CD:F4:6F
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A644713F930866578025F8
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28bdab30-a085-357b-8c3f-93815890b22b.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:44:71:3f:93:08:66:57:80:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=225ddd7f-6ab3-4c34-9459-7cb83bc6b5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:44:25:5a:6c:2b:4c:02:c8:1a:03:1c:2b:
                    61:18:0a:de:b7:72:fc:a4:5d:0f:23:ea:66:54:95:
                    3f:0f:d2:9d:a1:45:3a:a4:a5:ca:70:3e:c5:18:48:
                    2a:4d:99:03:62:82:7f:f5:6f:ec:92:6e:3a:77:d7:
                    87:66:fe:31:e3:37:46:ed:7d:81:71:0f:53:cd:2b:
                    77:b5:be:f9:dd:e7:a9:ad:88:24:00:4d:41:46:94:
                    1c:2e:f3:a8:d6:08:76:37:ab:dd:f0:a1:fe:43:18:
                    bb:3c:1d:f9:88:83:b9:03:40:71:16:7b:85:81:6b:
                    5c:b7:ac:01:93:77:de:af:82:97:ce:04:ff:17:cf:
                    c5:e0:c3:24:c9:0a:7e:0b:11:fc:45:47:88:37:c0:
                    5a:22:7e:06:da:9c:8b:93:27:b0:72:0e:21:f7:46:
                    26:2f:69:8b:ad:d1:cb:55:fb:fb:19:c3:0b:4d:9d:
                    92:42:03:38:54:cc:35:0f:2a:03:ff:3f:69:50:86:
                    23:4f:34:a9:33:cc:ce:31:e9:82:49:58:53:f5:2b:
                    85:ce:15:b4:a8:87:46:8c:55:5a:9c:a0:5b:84:bd:
                    d5:f8:d1:ed:ea:73:90:97:40:ec:c3:33:a8:b3:77:
                    11:77:18:51:8d:9c:50:a1:d0:c7:88:44:bc:35:2b:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:37:A3:14:1F:E5:CB:3C:C6:37:83:9B:64:BA:EA:B8:CD:F4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28bdab30-a085-357b-8c3f-93815890b22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bc:46:ea:5c:36:b1:17:18:6f:cd:34:8c:ce:ae:e7:cd:e1:
         24:64:c8:8b:8e:a5:3c:05:30:26:7f:7f:ad:eb:38:22:99:fc:
         02:f8:d0:ad:5c:cf:73:b8:eb:da:3e:39:49:08:e1:df:f9:bb:
         f2:2f:c0:68:61:e0:33:41:ab:89:19:02:b8:52:8d:c4:33:5b:
         18:8f:f0:34:bd:64:78:74:4f:e3:de:6a:5b:13:23:57:21:9c:
         bc:99:9b:cb:a4:a7:e8:1d:85:54:7c:2e:9a:49:5e:07:79:eb:
         67:72:76:93:e8:c0:eb:59:f5:68:1c:66:3f:f9:7a:58:31:12:
         79:54:57:d6:b5:d4:c5:8e:25:0f:ce:fb:3e:b3:fd:3f:ed:99:
         d2:e1:3e:65:21:9e:13:34:3d:a4:36:20:dc:d5:62:4a:fc:53:
         6f:14:e4:d8:f1:cf:0a:63:ea:09:c2:17:d3:c5:d6:75:5c:4c:
         59:76:92:cc:c9:86:c6:0e:d0:c7:f6:4f:8f:e8:48:cf:b9:4d:
         b2:5d:d7:80:5b:ec:1c:35:f8:12:e3:4d:fe:a6:7f:4f:11:8d:
         0b:a2:d1:eb:96:54:58:4a:da:f9:77:db:19:7e:d7:53:b9:c7:
         0b:3d:01:d3:38:34:9c:43:d8:38:e5:54:95:e5:63:e7:fa:14:
         1e:37:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:19 2025 by rpki-client