Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa
File:                     cc606f12-511f-31c9-a491-2b7b79df745d.roa (raw, json)
Hash identifier:          4+nUKBF3MVbR0O0BgCUswvmNtFzqQSTy9Kep5Uo0lKw=
Subject key identifier:   0D:6D:8F:26:5B:38:2F:CE:3C:B9:6C:36:FC:D2:9B:50:77:8C:03:A1
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858487E506639A2F59B2DA7872DC0
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     36184
IP address blocks:        208.94.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:66:39:a2:f5:9b:2d:a7:87:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=72a2909c-9c9e-4f43-8b5d-75f8f9fed443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:65:9d:2f:fd:5e:c2:f8:20:36:88:cf:54:
                    8c:6d:02:db:97:ca:87:b0:68:cf:86:8f:81:97:ec:
                    f6:1e:49:e4:00:c7:dc:aa:76:db:5a:ff:1f:fd:33:
                    d0:e1:13:85:6b:59:b9:ed:93:2c:a7:6e:50:1d:6c:
                    12:29:b5:f2:0b:9f:96:65:5e:72:62:80:69:81:72:
                    ef:c6:80:09:45:a7:e7:3d:01:39:b8:83:d9:d2:93:
                    09:7b:7e:ec:ac:43:53:4c:8f:4e:18:01:ad:7a:98:
                    72:a3:c7:d4:0f:2c:de:9b:aa:65:6b:1c:7a:5c:7f:
                    da:1c:d9:54:82:ef:d9:95:0d:9e:04:6e:70:d6:8a:
                    c3:80:e2:92:50:f5:2f:9c:79:bc:23:d8:11:47:85:
                    03:61:66:a8:2e:49:d8:23:ae:fd:23:63:62:28:e4:
                    0d:71:45:8f:0d:9c:91:b0:1d:c6:1e:d0:a6:95:db:
                    cd:08:f3:c1:76:0f:e5:c1:7d:fd:ce:06:9d:4e:f0:
                    51:41:c9:f0:c7:7c:21:50:22:ef:0d:57:7b:80:10:
                    b7:b2:e0:6c:87:00:23:b8:d0:61:74:0c:ce:3b:0f:
                    aa:4d:dd:24:ed:b1:91:49:3b:b2:ba:3d:e8:66:88:
                    2f:b5:82:71:c3:a1:0e:8c:25:9b:b9:53:3a:b6:ed:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:8F:26:5B:38:2F:CE:3C:B9:6C:36:FC:D2:9B:50:77:8C:03:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:85:3a:b3:eb:ec:34:8f:0f:3d:7e:2b:b5:15:b0:4e:69:38:
         ed:1d:81:c2:14:f6:bf:c5:c2:ed:b5:36:98:05:f9:3b:7e:ba:
         cf:d6:7b:69:e4:82:41:f9:0d:b0:34:87:10:06:aa:09:1d:af:
         36:61:db:b0:4e:79:a4:4b:29:96:d1:61:f2:e9:97:7e:1d:a0:
         2f:70:cd:89:00:b6:87:3f:ca:33:5a:f1:8f:20:8f:c3:f2:22:
         14:42:f2:5a:2e:78:b1:d8:28:ca:97:e0:f2:6f:4c:19:06:9d:
         6e:d8:1c:83:f2:4b:0e:d7:3f:bf:ba:b6:4b:4f:c8:83:a8:6d:
         d0:e3:10:76:36:a6:32:ab:c4:07:6c:37:af:4d:b1:0d:67:ad:
         8c:cc:83:0a:b6:27:8b:b1:7d:32:c5:57:05:d6:16:0d:87:bd:
         ae:f2:79:1f:13:70:95:a5:b3:40:41:e7:94:90:df:7c:5c:b0:
         14:57:56:12:b1:58:c3:9c:2c:f9:c9:74:0c:8f:0a:be:80:9b:
         f0:9f:c6:60:73:92:32:29:46:a7:d1:a0:9f:a9:63:5b:78:49:
         10:df:47:c9:59:6b:53:af:44:11:02:b0:e3:3a:1a:6a:1b:a9:
         9d:38:1b:65:01:81:9c:1e:30:dc:67:ac:20:74:89:d7:08:6b:
         3a:93:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:51 2025 by rpki-client