Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa
File:                     62019f2b-af95-3e12-bc23-6c66accba91f.roa (raw, json)
Hash identifier:          8clS1qnMhGK0k9UemfZVKVp5rGv5gIbwA7jmj8nRoR8=
Subject key identifier:   60:76:89:E0:58:6A:C6:74:7D:02:F5:CF:38:70:83:C8:8D:FC:CC:DD
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858492E13C6C122BE563CB3BC0DC0
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     1742
IP address blocks:        192.43.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c6:c1:22:be:56:3c:b3:bc:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=f10bf1c1-ecdf-4bff-95c0-85403414627a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:41:19:15:56:5b:32:3a:97:64:5c:ca:07:
                    6f:7e:82:5f:6d:08:67:e5:9c:64:1e:da:66:98:c3:
                    d9:14:9d:3a:e9:70:31:6c:fb:0d:8b:f9:f7:2b:dc:
                    8e:a6:7a:44:11:71:65:d4:ab:1e:27:d6:0f:08:05:
                    24:22:d4:fd:45:02:a9:ba:2f:f4:9c:0d:bb:d4:df:
                    e7:16:7d:11:12:1d:12:6d:68:8e:7d:61:fe:6b:cc:
                    ae:7c:8b:b4:e9:73:29:ad:73:1c:5f:b2:83:8f:b9:
                    d9:00:fd:de:fa:6d:88:8e:34:57:10:ba:fe:38:47:
                    d6:1d:38:fd:2b:8b:cc:eb:ca:a8:89:d2:b4:65:63:
                    74:9f:12:60:cb:53:9d:a6:59:39:1d:00:05:67:1b:
                    9e:56:40:67:bd:91:73:69:fb:39:d0:22:47:ab:02:
                    ed:a5:fa:91:4b:74:6d:ff:c6:5b:ed:d6:66:78:55:
                    d1:2a:30:a1:2d:a5:56:0d:ce:4f:9b:d7:5d:03:a5:
                    ae:15:ed:2a:da:71:f1:7c:41:f8:2e:22:64:64:a2:
                    40:a5:ec:fa:d9:31:4f:f8:19:ce:c6:6e:25:c6:94:
                    3c:65:82:ba:b8:fa:da:49:6e:59:d6:36:81:49:13:
                    d9:7a:89:16:c2:da:66:75:2c:c2:2f:65:40:8e:1d:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:89:E0:58:6A:C6:74:7D:02:F5:CF:38:70:83:C8:8D:FC:CC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:3b:cb:4a:62:27:32:6e:50:c9:67:10:58:27:00:de:6f:
         34:f3:2a:d1:23:77:8f:e7:3c:88:a3:2c:8b:cd:ba:0d:23:9b:
         52:a5:17:a6:c1:43:5f:7b:39:3e:1e:73:9f:92:ac:87:76:df:
         8f:1e:63:5b:06:8a:79:04:c9:bc:44:69:32:13:13:97:b7:0e:
         cf:36:4c:04:c0:5f:d0:28:c4:ec:7c:7c:4c:eb:cd:51:0d:0c:
         e8:a3:cc:59:ba:05:fd:09:0f:56:bd:39:aa:12:03:5a:c0:48:
         11:45:9f:9f:7d:28:43:f9:e5:37:64:91:01:78:ed:5a:a8:90:
         0f:23:50:d0:05:e6:78:2e:c1:bb:0a:48:ef:3f:df:3c:4a:dc:
         5d:d0:52:7a:9c:d3:39:43:ca:12:ab:89:e7:b0:37:77:76:6f:
         c2:0e:ce:ee:cb:18:8f:90:d6:16:90:2c:87:d5:ef:1f:7d:01:
         d6:dc:6a:ad:b3:82:54:89:67:d5:ac:68:fc:03:ff:14:cd:a1:
         6b:32:45:35:7d:2d:cb:4b:b0:10:62:ad:43:64:36:c8:00:20:
         c2:55:88:c6:e4:99:f0:3c:d0:85:2d:bf:7a:fe:97:4a:5b:89:
         69:c4:8d:01:f6:2e:e1:8c:c9:9c:98:02:18:ac:99:da:4c:bb:
         07:ce:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:40 2025 by rpki-client