Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa
File:                     033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa (raw, json)
Hash identifier:          2lL7FZlTCzrbl9p6zN2qpDeCoU797LgINlOkI7RzTPI=
Subject key identifier:   F0:02:53:2E:B7:45:02:60:33:65:97:AB:12:01:84:C3:A8:03:BA:61
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F43285849151157A94BBD3C9399A12500
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     376
IP address blocks:        206.167.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:57:a9:4b:bd:3c:93:99:a1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=163e0fb8-fc2f-4206-8023-dbe8e02cf2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f1:90:a6:88:42:d7:49:b7:58:45:ac:b2:80:
                    a0:36:80:5a:5d:b2:c9:79:18:ae:ba:80:e5:a1:86:
                    e2:83:51:b6:40:1e:34:8a:61:d5:36:f0:2c:65:26:
                    46:23:fe:40:6a:33:19:90:a5:85:35:5c:72:77:28:
                    19:69:44:1d:4f:70:be:db:05:23:e6:6f:80:49:c6:
                    8f:f5:76:55:aa:83:78:f6:a3:af:c9:18:06:0b:2f:
                    bc:14:a0:2c:cf:59:a3:f8:66:7c:21:af:68:d8:ed:
                    82:df:39:ec:6e:be:71:91:38:8f:a1:d0:ea:63:31:
                    b5:44:30:59:e6:e0:95:6e:ed:9d:63:22:e4:c1:38:
                    be:2c:0b:eb:66:41:39:ee:c4:83:8d:75:43:10:2a:
                    e1:e3:a9:3b:94:f3:58:05:03:29:b0:c0:84:d7:9b:
                    e7:12:2a:ae:4a:07:4e:cf:f4:12:df:5d:3a:7e:07:
                    7f:de:03:1b:44:16:20:7f:1b:74:3f:7e:67:fc:69:
                    b9:ef:51:55:3f:75:ab:40:71:62:5b:d6:cc:5d:0a:
                    0d:60:f7:f5:65:d2:2d:72:fe:56:f5:56:b6:c2:0c:
                    fc:52:3e:9d:45:e6:43:80:c8:5f:02:ab:ce:d6:0e:
                    e2:e8:73:65:62:4d:51:e7:41:e5:f4:f5:b2:e4:50:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:53:2E:B7:45:02:60:33:65:97:AB:12:01:84:C3:A8:03:BA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:d2:e4:c2:c0:19:eb:71:c0:25:12:d8:1f:58:f1:77:b4:
         c2:43:78:02:d5:43:77:72:5c:99:c3:39:24:6a:4c:24:fe:4f:
         61:4b:62:ce:97:88:b9:13:4a:48:63:6f:f6:66:08:12:df:58:
         07:f7:9d:93:aa:38:a9:f4:9f:cb:8b:6c:92:32:0b:a2:50:05:
         68:25:1a:32:b2:03:ca:cc:f7:34:ef:d7:05:14:b2:5f:4f:c4:
         c9:2c:4c:fe:60:7e:ae:98:a4:74:c5:e6:27:cb:81:e0:71:cb:
         b2:1e:a4:cd:f0:c8:5b:c3:f7:b6:0d:0b:a1:0e:39:53:92:c5:
         07:61:4b:a7:ef:05:cc:a5:4d:4d:5b:47:39:3c:ae:fc:2f:cf:
         e6:ab:40:66:ca:93:bd:83:cb:8b:60:8f:14:9f:0a:8e:b2:c8:
         2d:df:9e:28:97:64:c8:58:6b:d5:13:4a:40:46:12:d4:6c:8d:
         a1:48:ed:5f:f8:e8:82:f1:3c:60:f9:c8:05:0d:93:f1:ab:2d:
         c9:4a:59:99:9d:9f:d0:16:6e:f6:3e:dd:0c:78:95:65:ff:86:
         f6:2d:09:99:85:ca:a8:f3:3e:fe:66:e5:c3:d7:8c:1b:15:50:
         70:95:b5:6a:0d:4f:b7:d9:04:7a:5a:7e:af:f0:dd:06:46:57:
         69:94:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:33 2025 by rpki-client