Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa
File:                     c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa (raw, json)
Hash identifier:          vnP7vS0hT1eKGVSqvZCxabBV5X2QKz99t7nDu/oOwzs=
Subject key identifier:   B8:EE:BD:60:E3:44:32:16:FA:99:25:1D:FD:D6:5E:56:69:B4:CF:10
Certificate issuer:       /CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
Certificate serial:       010D0C9F43285848C41B78CF2F6DB4183EEAAC00
Authority key identifier: 83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     30346
IP address blocks:        216.83.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:78:cf:2f:6d:b4:18:3e:ea:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=763351fe-5b89-4235-a9e8-9d4255c6ff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:09:d1:88:f5:ef:1a:a6:ee:e8:c7:79:38:03:
                    7e:15:1c:11:50:26:53:c5:01:99:90:06:11:bf:51:
                    88:0d:57:af:c7:fc:31:09:b3:8b:bb:56:d7:67:61:
                    76:cc:33:17:da:60:a2:56:85:7c:20:08:a7:48:14:
                    5d:8f:70:d6:53:e8:1b:18:b2:46:8f:75:48:1f:c1:
                    58:d7:45:25:24:68:80:30:66:2f:75:c7:e0:68:52:
                    9c:74:81:7e:5f:31:c2:fb:95:0f:77:7f:66:05:a3:
                    7a:85:4f:ae:3c:d1:da:fe:29:04:91:4e:04:1d:7f:
                    80:be:87:a0:ab:30:33:be:48:db:d2:fa:db:b6:a0:
                    db:14:eb:62:0f:1e:36:bf:ca:19:44:29:da:67:93:
                    08:27:f4:4a:f5:5e:d4:d0:a8:7b:e7:26:4d:ad:b3:
                    53:a1:92:62:48:3a:a9:49:f6:69:9d:4c:37:af:99:
                    3b:3a:87:fa:77:c0:3d:a5:1a:16:39:83:3a:38:c0:
                    f9:73:77:6a:a7:12:d8:15:27:6e:01:14:fe:7b:4f:
                    e4:ae:5e:a1:62:1a:62:c4:f3:78:28:e6:d4:1e:2f:
                    a8:1f:64:10:04:52:82:4a:07:a7:ca:1d:3a:02:27:
                    38:dc:2f:63:c0:f4:6f:87:06:dc:12:71:e9:3c:92:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:BD:60:E3:44:32:16:FA:99:25:1D:FD:D6:5E:56:69:B4:CF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.crl

            X509v3 Authority Key Identifier:
                keyid:83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:27:66:3d:e7:52:99:70:70:54:dd:be:bd:ca:75:7b:fe:c6:
         f7:be:49:22:cb:dc:42:28:cc:09:cb:ad:6d:ec:e4:c4:b2:72:
         5c:91:21:e5:7d:e3:77:03:57:12:8b:ae:0d:03:ce:7a:54:1a:
         d2:d2:c9:a4:a8:9a:7c:7f:d1:64:3c:81:02:24:6a:e5:e2:b3:
         49:d8:ac:c7:4c:59:ff:50:06:b3:62:ca:1c:49:2e:59:0f:fe:
         2e:9e:19:54:71:45:d6:e5:9b:0d:e3:e6:93:3c:27:f4:8a:b5:
         0c:d6:2d:69:49:f7:99:67:8d:a0:17:4c:2e:46:ab:f0:45:1c:
         a7:18:a5:87:09:6a:fd:77:64:a3:6c:fa:89:88:1c:43:db:cc:
         ec:9c:d6:ea:f2:2d:c4:82:0f:13:a5:fd:21:c6:79:03:10:6b:
         07:13:bc:4e:d7:be:c4:db:dd:a3:ef:23:50:e1:f5:0e:1b:6c:
         db:79:cc:eb:f4:41:0f:18:71:08:75:94:ab:da:03:45:37:f7:
         f3:b8:8e:d2:e0:4d:10:61:d1:6a:98:99:6c:ba:fd:56:6e:cb:
         60:2c:11:9c:e5:a6:77:81:96:2e:91:37:ba:9e:c0:99:1d:7c:
         c7:7d:ea:89:e8:15:0f:14:9e:ef:75:a9:7f:7c:49:ae:46:b3:
         de:4e:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:30 2025 by rpki-client