Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
File:                     56e77077-485f-3fa0-ac2f-5f511c9a284b.roa (raw, json)
Hash identifier:          rj20VYAsdYmoOYu2LOxgBRmu0y3LqJLByHyJx5uujg8=
Subject key identifier:   25:74:71:FC:02:4B:B8:E7:9F:29:E5:31:40:ED:19:E1:88:58:B2:44
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584925B3AADF1FCE024E48097CD6
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     398156
IP address blocks:        168.220.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:aa:df:1f:ce:02:4e:48:09:7c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=7050ee59-0736-4683-889c-7e24ab341121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:6a:3e:c7:3d:2d:d9:6f:b8:b3:3d:59:3b:
                    ad:66:6e:cb:8b:1f:c9:97:cd:cf:6b:29:e0:0f:eb:
                    2f:64:87:6f:10:15:82:0f:bd:28:2a:c2:5a:13:6f:
                    06:76:d8:f0:98:14:d0:af:90:c8:6e:15:06:96:af:
                    66:6f:7c:13:37:d2:3d:a8:b4:5b:1c:76:94:ca:3a:
                    58:f5:c8:77:4e:0c:6f:9a:7a:a4:41:d0:1c:09:6c:
                    4c:38:57:a1:49:db:b0:68:b5:42:65:e5:a7:f2:49:
                    d9:d5:10:6f:15:8f:d8:ac:88:08:1d:f1:01:fc:f4:
                    82:f9:e2:1e:50:2f:2a:71:66:e0:f1:20:be:d4:f4:
                    cd:69:19:73:61:f8:3f:c8:20:3b:10:f7:77:c1:30:
                    85:8e:3e:c6:a6:0b:6f:dc:f5:6d:07:b1:a9:ce:a8:
                    11:ba:2c:63:e0:df:40:c9:83:9f:ff:0a:61:c4:03:
                    9a:92:01:31:63:8d:44:88:1a:c2:05:8e:46:a0:ff:
                    b3:17:fe:50:57:be:51:2f:62:28:69:d6:3c:71:12:
                    e4:77:c1:85:dd:e0:d0:79:24:02:92:9c:cb:ac:86:
                    a3:da:b4:32:58:ce:e5:b7:71:38:07:07:ac:b8:8d:
                    8f:f7:81:ec:fe:12:86:31:36:c1:c5:c2:34:68:b7:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:74:71:FC:02:4B:B8:E7:9F:29:E5:31:40:ED:19:E1:88:58:B2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:92:7d:5c:29:cc:5b:22:74:7b:3f:0f:a1:2d:80:3f:00:e0:
         37:79:9c:8d:0f:22:1b:55:26:e4:0d:b4:26:65:91:d7:97:53:
         7e:e4:99:65:8f:bc:a5:7c:58:fa:83:d8:1c:06:18:5b:87:01:
         8a:6f:86:2b:6f:29:05:e4:78:13:22:cc:97:07:97:67:61:98:
         e9:8d:ad:90:01:5d:22:b2:05:8f:a2:05:8c:a0:d9:38:ae:09:
         f0:35:86:80:25:1f:74:f4:97:75:bb:25:61:4d:73:f8:c4:a8:
         45:e2:f0:f8:cb:55:87:17:63:47:2f:4b:84:67:e5:68:e1:4a:
         36:9f:e6:19:f0:7c:bd:b9:9c:b0:ae:3a:b2:59:42:da:48:d3:
         51:3a:70:d4:06:11:e5:b1:55:51:df:8f:f1:95:d4:87:4b:01:
         b9:b6:d1:9a:34:d8:11:1e:00:a1:18:f9:44:36:16:35:33:d4:
         f9:fa:3e:17:3f:51:3b:98:94:8b:6b:8a:94:10:bc:e7:0f:18:
         87:67:2d:bd:aa:0c:49:81:92:5c:4e:c3:49:47:59:97:87:dd:
         e1:71:44:8e:c6:66:bc:11:59:2c:38:c1:26:a9:42:ad:28:78:
         cf:b0:51:db:2a:f4:69:6a:61:85:70:a0:5a:65:74:84:35:67:
         d9:d3:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:40 2025 by rpki-client