Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa
File:                     8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json)
Hash identifier:          46+3a7ewDj+nbcmZOzHy9Wm+OIPEgFanGeiL4FaBW0A=
Subject key identifier:   04:1E:4B:36:9A:9D:E7:5C:63:8C:7B:98:56:C9:8C:D2:0E:68:0B:3D
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F432858491A53E8FE9BCE693D547F5880
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa
Signing time:             Thu 06 Mar 2025 23:13:55 +0000
ROA not before:           Thu 06 Mar 2025 23:13:55 +0000
ROA not after:            Wed 04 Jun 2025 22:13:55 +0000
asID:                     18855
IP address blocks:        160.223.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:53:e8:fe:9b:ce:69:3d:54:7f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Mar  6 23:13:55 2025 GMT
            Not After : Jun  4 22:13:55 2025 GMT
        Subject: CN=a3d06aa0-9852-4a52-9dbb-571d98c31cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:75:3f:20:12:d3:32:fb:7a:15:b6:94:a7:
                    a1:62:2e:a8:3e:a5:8d:69:3d:e8:e2:69:7b:dd:2d:
                    8c:be:a6:1b:49:0c:a5:73:ba:25:8c:81:ed:66:b5:
                    a9:fb:49:6d:4a:a4:cb:60:c8:47:af:9f:c9:0e:2a:
                    53:fc:0f:5a:64:b3:76:0a:64:25:a6:f9:48:89:8d:
                    40:3d:9d:12:90:01:8e:5b:89:0e:63:49:2d:94:6c:
                    f3:b5:59:27:41:5f:08:0e:27:46:df:60:19:c2:65:
                    65:28:d9:87:c9:4c:1e:4f:d4:88:77:72:d4:20:02:
                    c7:55:39:d8:ea:d8:b6:1b:4c:26:5d:5e:9e:f3:e0:
                    94:b4:ec:da:85:30:48:1c:28:80:e0:fe:b3:52:4e:
                    eb:b9:a8:ac:4f:42:2a:08:6a:b5:33:3b:33:08:5c:
                    59:3e:d9:74:5e:db:26:1c:81:9c:be:e3:b6:6a:68:
                    46:37:03:1c:d9:bf:47:30:72:ec:0e:f5:c8:e2:e0:
                    2b:ee:31:59:74:50:36:d5:32:a0:ac:e6:8e:0f:4e:
                    80:e1:ff:13:04:02:1e:94:92:18:ce:0e:02:0a:6a:
                    9a:a6:39:3e:82:bc:b0:3d:4f:5b:3e:8e:b2:c1:d7:
                    94:7e:32:7c:9c:6a:fe:c7:c1:04:98:7b:53:f1:70:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:4B:36:9A:9D:E7:5C:63:8C:7B:98:56:C9:8C:D2:0E:68:0B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:6f:a4:5a:6b:7f:11:fb:be:9e:19:34:08:fa:46:a6:23:
         e9:ee:96:8a:42:09:58:3d:58:71:d6:d5:ca:4d:e6:60:6a:d9:
         8c:c7:8c:e2:52:13:1c:20:72:78:55:c5:ef:bf:dd:ec:c9:90:
         7d:6b:f2:b4:17:fe:ca:ab:89:eb:45:14:ed:20:11:a7:e3:f3:
         f7:d5:bc:6e:06:2a:ea:33:2d:d1:18:c8:a5:ab:64:9c:23:37:
         bf:f6:ff:7a:c1:69:f1:85:2d:4f:d0:ed:5d:20:0d:1c:06:13:
         97:a2:22:a4:b9:0b:8a:04:1a:85:bf:7f:cd:07:16:4d:51:ec:
         8b:23:a3:81:32:c1:e8:8b:3a:83:9b:25:9f:97:47:c6:a0:11:
         3f:88:48:57:1f:19:e8:66:33:37:da:6b:6e:03:a6:55:38:ce:
         50:2f:06:97:90:8d:fa:63:38:56:02:76:98:88:fa:25:a8:b2:
         61:50:7d:3f:37:79:a9:72:e7:64:ac:e3:7c:06:7c:27:af:09:
         b5:2f:ac:19:28:4f:fc:b5:e7:c9:a2:2b:93:9c:2f:ae:19:68:
         f6:73:9d:c9:a8:a2:ef:a6:74:f0:ea:b7:c9:5d:09:ce:07:16:
         a5:98:77:6d:1c:c2:92:8f:d4:a4:f6:ce:65:69:8a:de:62:c8:
         ab:8f:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:52 2025 by rpki-client