Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa
File:                     01a37b5f-5443-3669-b248-eb39a56c71fa.roa (raw, json)
Hash identifier:          Ej7rpw0IHFb32XVRiFksOas3efQ8+xGWafjuNE5ovhY=
Subject key identifier:   40:29:13:17:18:F2:35:A1:36:0E:E4:CB:A0:0F:27:88:12:19:7C:75
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584921840EC0EC317802A2394980
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        206.222.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0e:c0:ec:31:78:02:a2:39:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ecff5bbe-746e-43da-b569-498def2c27e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:a1:ff:93:61:0b:e9:ec:22:dd:49:89:48:
                    5a:61:7f:52:6d:de:ad:8e:45:b4:37:bf:06:f5:9c:
                    01:d2:fd:f2:f5:a9:cb:d0:2a:16:08:b6:1a:35:40:
                    12:64:62:38:25:3b:17:8b:08:7a:89:50:18:2d:1c:
                    7d:d2:f1:dd:f0:e1:3a:38:8c:d5:25:8c:66:cd:71:
                    71:6a:fc:14:30:8a:f7:ab:ee:d4:d9:1a:d9:8b:9e:
                    b1:bc:12:1a:1d:60:b7:69:ea:23:ef:9a:74:59:f3:
                    b2:6e:5f:57:db:c9:e5:e8:b7:c3:e0:7a:7a:9e:11:
                    53:65:45:c8:c2:3f:2d:c1:f9:5d:a0:dd:d6:4c:17:
                    f4:90:d3:65:73:da:c5:94:06:3f:51:58:cc:38:d7:
                    87:23:e0:62:1b:3d:42:1b:17:6c:38:1e:d8:41:83:
                    44:ff:a6:f0:cb:6a:c6:a7:39:d4:65:0f:f9:33:2f:
                    15:34:90:d3:42:79:9b:31:35:ee:5b:65:22:89:8d:
                    05:13:f2:15:37:92:d6:36:95:a3:7c:c3:57:5a:91:
                    32:46:a9:5a:3e:42:c2:5a:2c:39:5b:a5:7f:ba:13:
                    80:4f:c5:14:f7:b9:ad:1b:ec:82:b9:75:c7:14:08:
                    64:b2:64:f7:dc:be:ae:bf:98:da:56:ad:76:0c:8a:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:13:17:18:F2:35:A1:36:0E:E4:CB:A0:0F:27:88:12:19:7C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.222.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:6e:73:cd:08:f2:7b:e2:34:e2:ae:85:2e:79:e5:40:26:
         cb:92:10:20:2a:1d:4a:4d:95:0b:97:09:68:e3:6a:44:3e:2b:
         ac:ea:e4:e5:67:75:61:ce:a3:bd:e8:20:fd:1c:12:fe:e9:c7:
         bc:84:68:59:37:e5:4d:83:6b:69:a3:bb:4c:d9:1c:ef:40:04:
         3b:47:f6:91:68:77:89:f3:cf:64:d4:86:eb:72:32:73:2a:5b:
         8a:7d:3a:5b:4a:0d:42:b4:15:48:a7:a4:36:ac:33:b5:82:d9:
         90:8f:4a:d4:05:5c:78:e7:c4:33:78:60:bb:2f:b6:9e:0d:2e:
         62:82:ac:50:1f:a2:99:92:62:f2:50:49:23:a6:b9:cd:fc:ba:
         4e:47:cd:91:bd:dd:35:f6:d0:86:eb:b3:4d:ba:e5:c2:fe:dc:
         60:fe:1a:b5:4b:a1:eb:9d:bd:b6:2c:48:32:d9:e5:62:2d:a3:
         5b:7f:b4:95:4e:e6:89:8b:9c:e7:8c:97:c2:71:46:e2:22:63:
         4f:18:83:a2:47:ce:9a:36:57:27:63:cc:77:a5:62:f9:3f:6b:
         85:52:9e:34:19:8f:24:7e:1d:5a:dd:89:b5:89:b4:4f:3b:d0:
         da:6b:02:e4:5c:fb:b0:40:7d:41:81:7b:67:9d:08:17:cf:89:
         7b:57:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:20 2025 by rpki-client