Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/52b83b9a-d742-3d16-af26-4fce60b1d31a.roa
File:                     52b83b9a-d742-3d16-af26-4fce60b1d31a.roa (raw, json)
Hash identifier:          uM5UnbwJUHeXZSHdTMCZoJqEFaNUQHSzdU5GHxPEYak=
Subject key identifier:   7E:09:E6:A6:58:36:4E:FC:51:04:3D:64:6D:BA:C9:D6:E4:C9:BA:6D
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A6450176E25492C25AF040
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/52b83b9a-d742-3d16-af26-4fce60b1d31a.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:45:01:76:e2:54:92:c2:5a:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=9885a5ca-1545-4703-be3f-70f14fb1dca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:4b:1c:82:9c:a8:e2:02:6b:04:a3:45:5b:
                    73:01:b6:78:40:0e:33:e0:bc:ab:66:be:58:b4:a2:
                    40:41:c8:98:ce:50:75:8a:35:19:42:71:ca:5a:ed:
                    6f:68:ee:94:a2:bc:55:e0:60:61:8e:39:26:3d:10:
                    df:a2:60:ab:5a:16:98:31:e1:96:66:31:54:0c:f4:
                    66:02:0f:8c:3b:75:16:7e:46:89:83:63:da:89:bd:
                    a6:5e:8d:f6:be:6b:d9:54:c3:24:40:44:96:c4:18:
                    2e:d3:3d:03:98:a1:12:9b:df:9d:14:74:b3:bd:2e:
                    a9:38:fd:85:35:6d:32:b0:88:31:35:d9:da:e5:2a:
                    a9:f8:b6:fb:89:2a:ef:4b:cf:33:00:94:35:e9:f6:
                    12:23:92:1d:37:43:e7:9d:99:06:6a:a1:ff:56:a4:
                    97:12:b5:e9:ec:6c:6d:87:88:0c:b8:09:91:1a:39:
                    f1:18:42:1c:64:39:f7:4c:82:82:c7:93:15:17:22:
                    e0:d1:a3:db:b3:ef:26:7a:7e:66:7e:e8:71:dc:21:
                    cb:02:13:11:fe:bb:17:de:ec:ee:a2:c7:9b:09:76:
                    88:21:12:56:89:18:17:e1:7f:c2:f9:6b:20:f7:4a:
                    b5:20:df:ae:72:b5:93:bb:33:75:68:6d:7b:69:b7:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:E6:A6:58:36:4E:FC:51:04:3D:64:6D:BA:C9:D6:E4:C9:BA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/52b83b9a-d742-3d16-af26-4fce60b1d31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:db:cf:d4:4f:9d:bb:b9:83:ca:4c:f9:07:85:b7:4a:47:ca:
         48:5c:d0:71:15:d8:31:ce:93:b6:5e:cc:7a:f8:86:17:60:c8:
         e7:04:6e:32:40:7e:18:44:5b:e3:b9:b7:3c:e9:01:93:24:76:
         89:68:15:a8:e4:8b:63:08:36:b6:81:56:6d:74:ef:0a:f9:9f:
         73:09:7d:9e:5a:78:44:11:51:46:04:c6:32:9b:1b:9e:77:12:
         14:39:7e:61:66:12:8c:2f:63:78:1a:fb:46:a1:f8:05:d0:67:
         23:62:43:6e:b3:bb:bb:da:80:19:51:d9:0d:5a:28:37:12:db:
         a0:74:9c:5a:15:3f:bf:57:ca:38:af:68:cb:f5:80:dd:02:29:
         e5:ed:36:c8:08:d8:8f:55:89:71:b2:f2:c9:1a:18:c5:88:c3:
         aa:e3:e6:70:12:22:6a:4d:1e:9c:f9:e3:25:ff:49:74:cd:65:
         07:c0:d3:69:c8:40:09:a1:c8:16:11:38:cf:14:41:59:53:82:
         c8:7a:fc:98:8d:e4:11:ad:67:45:23:38:a4:04:5d:2f:21:07:
         a6:1a:10:fa:4e:40:e2:00:3f:71:1b:9c:9c:f6:29:b5:8f:47:
         41:a4:a1:a7:1a:12:01:58:20:d1:5d:27:61:38:9c:1a:96:7b:
         f4:66:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:47 2025 by rpki-client