Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4b6671f6-4b6c-3c51-b164-42ade250c2b4.roa
File:                     4b6671f6-4b6c-3c51-b164-42ade250c2b4.roa (raw, json)
Hash identifier:          fUndWruNwY/7la2zvmnzydAdPR6xPFUzmhu56attzB8=
Subject key identifier:   8E:EB:C0:4E:D1:E0:0D:BE:87:03:EF:53:AB:41:73:62:EE:35:F1:BC
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285848887AF2F4FE3C57CCB8FB5D80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4b6671f6-4b6c-3c51-b164-42ade250c2b4.roa
Signing time:             Mon 13 Jan 2025 17:24:33 +0000
ROA not before:           Mon 13 Jan 2025 17:24:33 +0000
ROA not after:            Sun 13 Apr 2025 16:24:33 +0000
asID:                     62943
IP address blocks:        216.224.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:7a:f2:f4:fe:3c:57:cc:b8:fb:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jan 13 17:24:33 2025 GMT
            Not After : Apr 13 16:24:33 2025 GMT
        Subject: CN=8f82d4ea-c1fb-49f2-b2f9-c155edc578a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:7b:4d:67:d5:79:5e:78:82:21:2e:5f:4a:
                    c8:02:3e:32:46:bb:31:fe:d2:29:18:a7:f5:f6:fa:
                    1e:37:2f:d4:65:ef:01:bf:6e:0a:61:59:6c:9b:64:
                    d0:09:53:f5:11:d4:64:b6:cb:58:12:5f:e2:47:1f:
                    86:1b:87:38:1d:40:b5:0c:0e:4a:8d:60:a7:ee:9e:
                    6e:ba:8a:9c:c7:eb:06:3f:97:91:72:99:54:2e:7f:
                    5b:98:d0:e6:04:8b:29:96:37:0c:71:f9:d7:11:7e:
                    75:1d:70:36:cd:e5:c7:b2:57:9d:01:53:e2:7e:1c:
                    a2:0e:8f:dc:a6:2b:1a:f1:41:d8:b4:e5:d7:df:0a:
                    7b:d5:8e:25:3a:7e:31:b3:49:6a:2c:ed:0c:53:60:
                    47:79:8b:44:26:d7:1f:51:c5:63:08:02:69:c7:ff:
                    1e:8c:8a:2a:80:9c:5f:f9:1e:4e:a1:29:7b:8c:9b:
                    91:93:69:da:89:08:8f:7f:8c:08:9a:5f:89:19:9a:
                    a9:a2:ec:71:bc:a0:1a:0d:91:8d:d3:cf:d1:4b:42:
                    d3:b6:e7:7f:44:6a:8c:7d:69:44:8d:a1:eb:b2:29:
                    ec:a1:ca:3f:20:7d:24:f4:f7:09:ef:17:89:b8:e4:
                    3f:fd:ad:ff:57:87:0e:66:93:dc:ad:c5:bc:27:39:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:C0:4E:D1:E0:0D:BE:87:03:EF:53:AB:41:73:62:EE:35:F1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4b6671f6-4b6c-3c51-b164-42ade250c2b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:0e:35:58:04:23:e2:c6:6f:6d:27:3e:e3:ab:9c:b2:97:
         88:4b:9f:29:cf:04:80:d2:48:c6:be:71:76:24:dd:38:6e:ea:
         ef:b4:78:05:14:86:0c:9e:3c:da:68:9b:99:a6:b5:d8:20:7a:
         88:e9:ca:ca:20:6b:79:7b:6b:1f:b0:74:21:75:a1:9a:86:e5:
         8a:0b:1e:ef:f4:1d:1c:a9:3a:2f:7a:a5:56:27:af:62:1e:05:
         2f:37:28:bd:fb:5f:d8:a4:db:8e:90:3b:f5:a8:0e:9b:1b:dc:
         0a:c7:33:c4:2a:63:b3:ec:36:08:a9:26:48:3f:ed:5f:6c:8d:
         20:9c:ec:96:22:90:d5:f0:03:01:7f:3b:1d:0c:f2:5d:cd:49:
         00:c6:5a:0d:5d:b6:7f:bb:66:e3:3e:a6:81:fb:b9:39:07:60:
         3c:a6:78:ad:b8:1f:23:be:e0:03:ed:86:a8:cc:dd:d5:1d:de:
         da:b1:88:4a:e7:f2:87:7c:ab:76:04:6b:f2:8a:57:86:9c:16:
         d9:bd:72:96:61:22:6b:56:0c:2f:ad:0b:bb:07:12:94:b4:a0:
         d5:08:85:cc:aa:ea:c4:f9:c8:c0:b4:cd:a1:f4:77:3a:54:34:
         d5:c6:16:f5:ad:6d:e8:69:07:12:18:1c:cf:c2:a1:14:71:77:
         b4:b8:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:25 2025 by rpki-client