Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d29d0491-c853-3366-b531-e00f61e0b97e.roa
File:                     d29d0491-c853-3366-b531-e00f61e0b97e.roa (raw, json)
Hash identifier:          e9XnSNX0bE2sgcr+i32Ji+xgv29AsY7N3PSgh0dE4JE=
Subject key identifier:   76:6C:AC:B3:BD:29:BD:9E:F8:45:ED:63:28:DC:F5:04:45:55:48:19
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F432858493B5EB7259EF7EBC20DCA7C40
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d29d0491-c853-3366-b531-e00f61e0b97e.roa
Signing time:             Tue 18 Mar 2025 19:17:21 +0000
ROA not before:           Tue 18 Mar 2025 19:17:21 +0000
ROA not after:            Mon 16 Jun 2025 19:17:21 +0000
asID:                     62005
IP address blocks:        216.83.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:5e:b7:25:9e:f7:eb:c2:0d:ca:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Mar 18 19:17:21 2025 GMT
            Not After : Jun 16 19:17:21 2025 GMT
        Subject: CN=a281b72c-9e21-4a79-9e8c-33ba88839388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:87:21:e9:28:2d:9e:c2:2e:e2:2d:dd:13:
                    6b:63:3d:b9:14:65:b6:28:84:49:c0:b4:63:12:2a:
                    24:8f:10:36:c1:83:09:6e:63:b2:44:8f:d8:22:ad:
                    4d:43:0c:18:c7:a3:11:ba:7f:05:9e:df:80:d3:4d:
                    45:53:bc:bf:c6:f1:1c:d3:8c:eb:06:61:37:8f:eb:
                    c3:11:4b:5f:76:fa:47:5c:2b:06:c1:26:ec:dd:2c:
                    63:82:90:95:22:47:ff:b1:6e:03:62:be:0d:33:f6:
                    da:67:65:34:8b:12:32:78:ae:15:df:99:9f:16:92:
                    be:6b:4f:4e:dd:c0:e2:a4:e4:02:86:7f:75:8d:ed:
                    92:33:fd:74:32:ac:3f:9a:ad:b4:50:f8:7d:d1:4d:
                    ec:2e:78:26:05:e2:d7:ab:2d:48:59:36:7f:a5:ea:
                    8a:13:28:d9:41:e1:f0:d1:11:54:d8:26:87:81:19:
                    c2:98:5a:49:28:c9:6b:19:e2:14:b9:ad:50:ff:5a:
                    57:3b:92:b8:66:15:4c:f5:b8:a5:34:80:7b:6a:99:
                    4d:2a:d4:08:2a:12:1f:4a:c6:c7:27:57:e6:37:df:
                    4d:88:08:0d:11:1f:d8:8c:01:b2:20:a5:b7:d0:67:
                    ce:8b:82:e6:78:9c:a1:6d:6d:3b:5b:08:7d:6b:d1:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6C:AC:B3:BD:29:BD:9E:F8:45:ED:63:28:DC:F5:04:45:55:48:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d29d0491-c853-3366-b531-e00f61e0b97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:48:02:b0:5c:15:73:15:66:c2:57:f7:0f:65:94:1a:33:ba:
         28:7d:61:e7:00:f2:c6:69:32:a5:0c:b6:82:fb:20:50:89:43:
         49:fe:ed:0f:ef:a2:aa:5a:82:aa:15:e1:f9:6b:ec:d7:a7:93:
         90:79:38:e5:de:95:10:cc:16:d7:b5:80:46:63:06:5c:24:42:
         f9:2d:5f:0c:63:4e:86:e0:36:89:76:83:a4:5a:b0:cf:a8:54:
         85:69:c7:c5:cc:ab:36:e3:de:40:3a:99:2d:c7:03:96:2a:4d:
         6b:c8:af:d6:d4:87:4f:60:76:d3:83:e0:2c:fd:f8:57:d2:22:
         94:8d:2c:70:d9:98:f7:15:68:74:b7:2c:47:58:63:68:f6:23:
         88:ff:25:9b:b9:e1:f2:5b:70:22:d4:d9:83:d8:3f:17:38:d6:
         a6:c5:5e:b6:7f:ec:67:6f:59:aa:24:f3:bc:0d:34:f2:a1:d6:
         3e:b6:33:6f:51:b8:16:18:0d:d0:e0:61:3c:79:ba:f3:b6:3c:
         ff:b7:72:13:5e:90:96:63:f7:84:d6:1e:fb:f9:91:7c:79:c8:
         40:b1:62:73:7c:db:f0:ff:6f:93:f8:3b:18:62:21:22:fa:c0:
         d2:dd:a4:f9:59:3e:0d:db:e5:2d:b1:07:f4:a1:6f:a7:a2:80:
         81:ea:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:28 2025 by rpki-client