Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa
File:                     b127d67a-04bf-37a9-be8b-1a83681d8652.roa (raw, json)
Hash identifier:          mbjx+hipZlFp8tOSC1SAFku3ZAX6a69lROyVH0qHEC4=
Subject key identifier:   12:69:40:E1:19:2F:AF:93:A4:FF:82:A8:9C:EE:77:6D:94:06:B8:4B
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584930DE759E8248A673193F9980
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     399575
IP address blocks:        206.204.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:75:9e:82:48:a6:73:19:3f:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=c657020b-8536-4c71-b122-d4af85dd7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:22:e5:48:a2:03:1f:23:73:76:6b:68:66:
                    2e:73:c3:6a:0a:bf:af:4c:47:02:b3:b0:75:a6:32:
                    bf:c7:e0:a8:5d:93:ea:67:02:d9:2d:7d:a4:d0:9d:
                    9c:b4:34:4a:b1:d7:fb:38:09:45:27:67:3e:25:5d:
                    b7:87:69:91:2a:e9:82:90:1d:72:bc:41:41:da:46:
                    dd:26:e3:c8:23:04:26:df:2d:07:f4:7d:12:2c:04:
                    a2:f3:e9:ec:a0:dc:a5:f0:23:5c:5f:13:ff:f5:9b:
                    47:76:84:33:1c:c5:f0:98:91:0c:58:ee:d0:ca:27:
                    5e:c6:d1:7d:44:2a:9d:db:18:a2:ec:1a:cb:ba:ff:
                    8a:53:83:64:2f:a8:20:08:75:ea:d2:8d:ae:38:38:
                    6e:e8:d5:5f:d4:c9:ed:e9:2a:10:ab:96:05:dc:e6:
                    f6:a7:b6:8a:75:06:36:e9:4f:0d:ad:d0:8f:39:6e:
                    70:6f:54:09:5d:48:f8:95:ed:b4:49:8b:4d:75:db:
                    0e:a6:78:ad:2f:c3:b3:da:dd:4a:66:85:2a:eb:33:
                    bf:b2:a5:c1:8e:50:5c:7b:9e:e6:fe:e5:d8:45:55:
                    96:fc:ce:c3:d0:0e:8d:bd:32:cf:dd:53:7b:12:d5:
                    6e:a1:fa:6c:07:69:34:bd:db:59:e8:a0:7c:3c:00:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:69:40:E1:19:2F:AF:93:A4:FF:82:A8:9C:EE:77:6D:94:06:B8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:aa:40:c1:b6:ab:9f:23:0c:d4:e5:8e:b3:eb:0f:c8:8e:0b:
         10:c9:8a:2f:b9:34:3b:dd:b9:62:3b:21:2c:d5:6c:89:34:d0:
         1c:9a:8b:f4:78:19:5f:0d:29:e6:9d:00:92:69:c9:c7:72:25:
         4b:e6:b0:33:39:0e:61:7e:bb:e7:df:db:e7:ff:da:de:25:7a:
         43:28:d8:5b:8a:c9:97:95:90:6b:3a:49:13:f4:ea:47:92:9e:
         32:5d:0b:3f:84:1d:ca:4a:8b:9f:90:e5:1d:08:0f:bf:28:e7:
         6c:0c:2f:5a:db:ff:82:3b:f8:c1:c6:e8:eb:75:fd:8e:2f:1f:
         aa:47:64:a5:52:f9:11:7f:3b:84:a1:ba:1b:e6:3c:15:8a:33:
         3f:75:58:2c:ff:47:74:a2:98:3d:09:ce:1a:07:d5:06:06:1e:
         62:39:51:2c:a6:05:d5:11:56:f1:ee:c4:b3:b6:4d:c4:3d:4f:
         5c:74:3e:87:54:fb:02:c8:91:79:7b:05:52:14:f2:bc:9d:c7:
         0f:d7:51:d8:0c:5d:45:bc:e5:a8:52:ad:20:f0:7d:9d:3d:79:
         49:53:93:00:9d:fe:a6:6e:fc:b4:7c:2a:e2:48:15:b7:1f:22:
         d4:04:af:54:d0:4d:4e:97:94:f2:a9:e0:c0:30:48:5e:7a:74:
         7e:31:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:47 2025 by rpki-client