Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4524a24a-7e06-33a4-a62f-c6035d8dfa7d.roa
File:                     4524a24a-7e06-33a4-a62f-c6035d8dfa7d.roa (raw, json)
Hash identifier:          VN4RkUOusvrG0s1HblsQla5TaBFXe4nGYVaYv3qyrWc=
Subject key identifier:   DC:9A:50:F1:BC:FE:54:5F:21:77:6A:D8:D0:A6:BE:E2:4E:E0:E0:F7
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858492CB228F0349A9DD75366B2C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4524a24a-7e06-33a4-a62f-c6035d8dfa7d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     393740
IP address blocks:        206.180.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:28:f0:34:9a:9d:d7:53:66:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e80671ad-0d59-4f90-b950-da0137dc6261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:1a:a6:2a:74:97:24:23:e5:b4:1c:21:81:
                    0f:a5:cf:36:e6:c5:89:53:47:f0:c3:fa:8c:c9:41:
                    70:58:48:20:a0:b1:cc:b0:0c:ad:51:8c:13:de:af:
                    ce:2b:88:d2:96:d6:33:63:c2:2c:de:7c:dd:47:d3:
                    81:d6:80:af:31:34:55:e7:10:1e:b0:35:69:42:78:
                    9f:d0:72:55:7e:1a:ea:bf:84:c3:e3:70:06:79:59:
                    63:e1:70:3c:74:d2:56:71:f7:e5:99:fb:28:72:63:
                    4d:6a:7a:91:02:d5:d8:54:b4:26:4e:ee:03:af:0c:
                    46:a4:95:9e:ee:fe:67:ee:ec:97:94:5b:53:81:8d:
                    04:3e:09:0f:6d:39:57:f9:fd:0d:fb:e4:14:cd:35:
                    5d:36:c6:4c:4c:df:5b:98:94:9e:46:fd:94:38:ca:
                    d8:16:a2:29:9d:3a:b8:b5:db:d8:8c:f2:fb:13:29:
                    f5:0d:1f:c6:a9:86:2c:fc:26:c0:e1:14:5f:ee:e4:
                    2b:04:c5:81:fc:7e:52:25:cb:1e:58:3c:57:69:f2:
                    a4:7a:6d:06:ee:8b:86:61:45:4e:12:84:99:77:20:
                    3e:1c:75:57:25:57:ff:65:aa:a2:9c:a4:00:44:49:
                    52:5c:a7:77:3e:b5:d2:48:7c:9f:cb:49:c7:59:ef:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9A:50:F1:BC:FE:54:5F:21:77:6A:D8:D0:A6:BE:E2:4E:E0:E0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4524a24a-7e06-33a4-a62f-c6035d8dfa7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:88:34:63:65:99:58:70:32:d6:30:d8:32:62:47:06:04:af:
         66:28:3a:ab:ae:a5:9f:c7:79:88:b6:71:9c:a0:73:99:4c:b7:
         46:a9:e9:e8:94:2c:d1:b1:79:69:73:7c:54:a5:84:b7:dc:e5:
         86:e9:b8:76:2e:94:bc:9f:df:71:5d:1b:81:bd:16:dd:c9:28:
         32:80:f9:33:f0:60:46:d6:ff:f2:0a:7a:96:10:bc:83:f9:69:
         a1:a5:97:cc:20:61:c2:1b:b8:66:91:77:73:3f:0e:94:4f:24:
         32:66:a5:1a:72:14:11:b2:91:74:7d:ec:7e:9d:47:73:85:43:
         ec:75:73:79:73:65:23:ed:61:d0:05:fd:f4:cc:9d:31:cb:7b:
         8f:2d:a7:b4:d2:06:8e:bb:ad:e0:03:64:af:d7:fe:57:e8:ba:
         d6:69:c6:8c:9b:54:d3:94:1b:28:2b:51:ff:df:4a:6a:cc:3c:
         25:5c:e0:bc:22:ae:35:37:66:cb:07:42:35:02:ac:4b:ed:bd:
         a0:76:c3:e2:5c:ab:fe:a7:a2:0f:fb:49:de:d2:5e:c9:d0:17:
         43:63:9d:7d:e9:2b:77:f8:13:d1:5d:25:b3:82:c0:b1:6e:8b:
         a3:d5:9c:1a:d4:d9:01:2c:bf:e3:dc:d4:fd:86:95:44:43:9f:
         a9:10:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:33 2025 by rpki-client