Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
File:                     4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa (raw, json)
Hash identifier:          FiuA/qYehpo1X5DLpjBCVwMR4dB9F2Y0zVyMyEPiWZg=
Subject key identifier:   30:42:D9:B9:BF:72:57:B9:0F:78:EA:04:7B:01:42:42:55:5A:10:76
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0BE39B5DDED4CC8A5C180
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:be:39:b5:dd:ed:4c:c8:a5:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=2da53c0f-6721-45de-bc11-4253a076fcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:8f:57:90:a0:8c:00:5f:dd:67:d4:1a:19:
                    ce:72:11:34:dc:6d:b8:91:06:52:66:90:f6:4b:55:
                    88:d3:50:84:81:bc:96:aa:ab:dc:aa:aa:39:00:c1:
                    c0:37:53:d1:22:0f:93:7d:95:6e:cb:d4:0b:0d:ce:
                    7d:5b:ee:05:35:99:d1:cf:fa:8c:b3:8f:ae:78:e0:
                    ec:39:5e:f6:4c:9b:d6:ed:ec:1a:68:25:bb:66:74:
                    22:ee:6d:25:d5:66:c4:76:2a:58:9c:0b:a5:d8:8b:
                    5e:0a:ea:bd:c0:c8:69:f3:5c:d5:af:75:72:39:2a:
                    5f:14:d1:eb:0f:7c:85:2f:f6:36:5d:3f:d8:24:a9:
                    f8:5b:8e:73:d4:cf:06:84:5b:75:a4:05:a1:dd:c4:
                    aa:d3:2f:2c:bc:f8:19:22:05:85:d7:99:0a:df:1a:
                    9e:0a:ca:16:72:d9:8e:66:60:a8:3c:9f:09:96:5b:
                    19:2b:34:bb:17:a9:b9:8b:fa:53:99:ef:32:14:1f:
                    72:a5:c1:b0:e7:94:95:29:47:a5:f3:28:14:18:f5:
                    e5:39:d0:00:70:ff:05:f4:70:87:16:37:e5:50:b3:
                    ee:7c:27:d9:91:8a:1d:77:d6:d1:9f:3a:fe:65:a4:
                    8a:45:8f:b8:b1:38:62:85:33:e4:65:71:55:46:8d:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:D9:B9:BF:72:57:B9:0F:78:EA:04:7B:01:42:42:55:5A:10:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:39:96:40:dc:b7:7e:90:d5:20:29:0a:ff:9e:dd:c4:e9:d9:
         a5:32:48:5e:5f:b3:83:0a:e1:52:7b:26:ec:16:58:64:d0:eb:
         2c:7a:fc:dc:99:6c:99:d8:84:b2:33:f3:f4:5c:03:a6:45:51:
         e3:31:7e:bc:50:d8:9c:4c:2e:a7:f6:39:80:2b:f8:fb:a4:cf:
         da:a0:0d:0a:68:ef:fb:3b:91:69:a8:d3:ea:08:51:5c:6d:c7:
         26:ad:f9:38:4a:7d:1e:c1:66:a4:31:b4:70:6c:f0:f4:fc:fd:
         1a:fb:ff:8e:8a:a1:ba:6c:6a:63:b5:c3:50:0a:4c:99:3f:83:
         de:37:29:cf:f3:6f:6c:8e:8b:4e:ff:0b:48:af:6d:36:2c:06:
         3b:fe:5b:26:fc:6a:0d:a9:de:8a:81:56:e7:30:68:84:dd:b3:
         5d:d9:e0:4c:ae:9e:5a:61:51:0d:05:53:43:27:83:ad:15:b7:
         9a:73:86:c1:68:64:8f:78:c9:0b:19:e8:2a:38:fd:08:4d:76:
         71:8f:52:67:a7:81:63:35:27:a8:ca:42:17:1f:46:06:0a:34:
         af:26:ce:3d:2d:f1:0e:4a:b2:a6:02:8e:47:cd:c4:16:fb:86:
         b9:01:87:10:35:40:a2:28:1e:d5:f9:de:75:d6:d0:cc:38:77:
         a8:9c:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:32 2025 by rpki-client