Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa
File:                     e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa (raw, json)
Hash identifier:          aCHxc24fIVSSIjZlKpgsGMBb249K5Z89RT9t5ixw7BE=
Subject key identifier:   54:87:F1:8C:80:E2:21:AB:BE:EA:4F:6E:EC:C4:EE:BB:A6:9F:4A:19
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584921840F770ABF95D0A5005600
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        216.129.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0f:77:0a:bf:95:d0:a5:00:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=65052748-e8d1-408a-90de-7fed4070b94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:b0:49:ff:35:7d:ac:85:2d:34:1a:c8:72:
                    10:5d:e8:1c:fc:88:bb:5d:65:d6:5c:d3:2c:b3:0c:
                    36:74:e6:b3:88:9f:1b:7b:25:4b:df:2b:2d:bd:68:
                    b5:11:28:62:2a:2d:73:df:27:06:d6:f7:80:0d:ce:
                    53:7a:ea:93:b1:80:53:d9:2c:21:36:4c:e2:fb:18:
                    fa:d0:47:c9:ce:bb:ed:f9:06:66:5f:9b:b6:95:2e:
                    0b:6f:04:f1:30:bd:bb:81:7c:d5:a4:ef:2a:59:af:
                    dc:df:ae:35:0a:18:c2:16:e4:73:37:07:7a:b0:d4:
                    8c:11:62:22:4a:15:b5:16:ef:79:0f:ef:51:5f:09:
                    af:a7:cf:52:30:cc:ae:ff:93:aa:b3:c8:fe:62:9a:
                    d0:dd:af:89:a7:a2:53:e0:6b:93:60:68:c0:a8:52:
                    9a:0e:fb:8d:44:04:42:78:8f:0d:77:e6:1c:60:0b:
                    92:b6:8f:73:bd:0f:c9:2c:7b:8c:cb:99:60:e7:24:
                    fa:ae:b8:b0:23:87:e1:cf:d4:92:9f:33:c0:26:04:
                    53:11:65:c6:d8:eb:d8:30:4c:4c:86:0c:24:3c:84:
                    90:3e:f8:75:5b:79:18:be:52:c2:a3:48:41:57:36:
                    ac:00:5f:c9:cf:3a:e5:e1:1b:53:96:20:99:5d:6e:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:87:F1:8C:80:E2:21:AB:BE:EA:4F:6E:EC:C4:EE:BB:A6:9F:4A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:f2:4d:64:18:e8:6b:56:19:3e:eb:5c:a0:88:1d:b8:8a:
         0b:55:29:ae:41:82:0f:d0:42:ad:bc:1f:55:d6:27:d2:bf:f1:
         3a:5e:67:79:af:ad:25:26:12:43:18:3c:1e:0d:a6:e1:67:c0:
         6e:d3:1e:2e:79:61:33:c8:83:84:dc:02:50:97:16:a6:fe:b0:
         50:28:5b:4e:51:c0:00:a0:3d:27:31:af:78:36:ac:57:35:ef:
         f0:27:7f:b2:87:e6:e5:ca:c6:cb:3a:c2:5d:c4:72:71:d9:3a:
         38:c8:75:ff:71:28:35:d2:8e:5a:df:d3:78:18:c8:bd:2d:90:
         a3:51:33:36:f1:2d:88:4d:94:cb:56:9d:4a:b4:29:93:3f:4b:
         92:72:5f:96:5a:c6:13:00:a0:1c:eb:16:28:5e:3b:b8:cc:65:
         61:95:bc:a4:5e:30:85:a0:69:07:33:e2:de:dd:b7:1d:27:5a:
         1f:c9:14:45:f7:8b:c5:ac:c2:87:c0:94:a7:ff:c9:de:9c:47:
         05:88:a9:eb:34:a5:be:12:64:36:a2:f3:1d:2f:58:dc:d9:e6:
         a9:f5:f5:57:38:9d:0f:d6:e1:73:e6:b2:61:35:f0:85:2f:cd:
         0f:39:de:b3:38:e6:8b:01:25:fb:9b:f0:6a:f0:47:59:40:3e:
         c5:11:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:29 2025 by rpki-client