Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6c9fceb4-4360-3693-a5df-73a4ad707efe.roa
File:                     6c9fceb4-4360-3693-a5df-73a4ad707efe.roa (raw, json)
Hash identifier:          zGst/+H1st8TaLj0UTZ4/pxlF4rSW0euCK1ovVGzjc8=
Subject key identifier:   96:BF:3F:F7:FB:88:90:10:B8:1A:91:D0:65:D0:F3:EB:CC:EA:2B:3D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BE7E1905261EA21C939A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6c9fceb4-4360-3693-a5df-73a4ad707efe.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     4997
IP address blocks:        216.222.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e7:e1:90:52:61:ea:21:c9:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f931e059-0868-4be7-98d7-886b142ea696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:0a:8c:93:f5:11:01:47:8f:82:fc:6b:7c:
                    40:9f:18:81:5c:af:66:92:21:d6:54:fe:d7:fa:89:
                    29:fa:6a:52:e9:ab:18:78:49:97:68:e6:ae:d5:6b:
                    6b:fb:23:89:5a:f5:99:c8:03:c9:81:a2:33:1c:4e:
                    5a:a2:7c:d0:eb:94:84:61:f4:c8:88:0e:b2:59:28:
                    94:ce:63:7b:d5:f6:60:fe:1c:49:99:bc:58:77:aa:
                    8c:18:05:d4:bc:40:ce:2c:77:fd:7f:5a:e6:84:bb:
                    8f:15:73:c5:6c:29:b0:74:1a:b9:77:33:e2:92:8a:
                    04:a3:b8:b1:d2:51:5e:5e:de:c7:6b:73:83:a4:6e:
                    2d:ef:dd:aa:32:24:0a:6e:cf:c4:31:a3:8d:99:bd:
                    05:9d:06:65:07:a3:37:d8:20:4c:f1:14:8d:cc:05:
                    62:47:b5:19:7a:90:c7:5f:2e:3c:11:26:19:47:bb:
                    a6:1e:45:dc:09:e5:66:45:ec:c3:d0:a6:37:e1:a7:
                    38:72:72:54:38:af:33:37:2b:18:c9:2b:0e:04:f1:
                    ec:37:92:40:af:97:22:df:d4:d8:51:d0:60:8a:85:
                    b5:2a:9f:5a:aa:d7:67:36:6d:cc:06:fb:68:5f:84:
                    09:13:21:16:39:fc:d9:ba:6d:ac:a1:52:f6:56:3e:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BF:3F:F7:FB:88:90:10:B8:1A:91:D0:65:D0:F3:EB:CC:EA:2B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6c9fceb4-4360-3693-a5df-73a4ad707efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:62:57:9e:e0:3a:e9:be:35:66:1b:51:83:90:75:a5:7c:
         10:3d:cc:33:91:da:9f:65:09:28:88:a4:48:f9:5a:6e:7d:5f:
         c0:80:d2:8d:c0:04:50:16:a1:a8:e9:63:a9:61:b1:d2:7f:44:
         21:db:8c:8a:5e:08:fe:22:49:b5:9f:b9:7c:5f:e1:6a:d1:da:
         a2:14:9c:18:a6:c2:58:18:95:e0:2d:23:17:c5:73:88:ca:1d:
         12:54:af:3d:7c:9c:18:9b:e3:4b:74:e6:51:21:d3:4f:a6:6e:
         d5:a2:e0:2d:bb:a2:11:80:9b:14:8d:9c:dc:44:42:ca:ac:1b:
         a8:46:42:46:15:db:bc:93:e3:bb:99:b3:5e:e8:87:63:54:28:
         4f:30:7a:c3:1a:48:4b:58:cf:1e:42:fb:a2:d2:3a:3e:9f:4d:
         ca:11:17:b0:b0:7b:a4:fe:e1:fe:3d:da:c4:eb:44:8e:33:57:
         03:85:32:f2:c7:d9:ed:20:b5:25:c6:55:70:45:ac:5b:bf:34:
         d4:91:82:ce:06:6e:92:72:cc:f7:19:41:38:3b:7f:f1:23:b5:
         0d:5e:37:a9:21:27:c9:ef:8e:cb:77:6d:e3:15:44:86:56:73:
         d4:c1:89:d7:2b:7f:ef:02:c4:04:73:26:4e:74:0f:44:e0:d0:
         88:c1:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:00 2025 by rpki-client