Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca32579e-b07b-3e8e-9ca2-bd27027328ee.roa
File:                     ca32579e-b07b-3e8e-9ca2-bd27027328ee.roa (raw, json)
Hash identifier:          gg6Z8CTNoA00rpMXUAu22kzk/KVL1Id2i3X7rFfv+kk=
Subject key identifier:   9C:C8:56:FE:4F:11:22:D3:61:9C:D8:9D:68:83:90:6C:84:FC:4F:92
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584882809EA23E61C02018C34280
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca32579e-b07b-3e8e-9ca2-bd27027328ee.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     13389
IP address blocks:        216.179.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:9e:a2:3e:61:c0:20:18:c3:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=8eb9430c-ea1d-468a-9f10-e51018346bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:6f:2b:3f:82:a0:c4:5d:da:e2:b8:1c:8c:
                    93:6e:75:56:0c:55:20:84:87:f1:ab:49:81:eb:1e:
                    95:87:a9:8a:8e:a7:01:03:df:54:5c:21:d6:76:96:
                    d9:22:0a:d5:ae:7b:2d:10:66:61:7f:73:b4:dd:30:
                    26:b1:3b:e9:74:d1:8c:ad:aa:ee:82:c5:3a:c1:ad:
                    d8:e3:cf:88:0b:73:7e:3c:6e:97:0d:5f:23:a9:89:
                    10:dc:4f:5e:3f:c0:80:c0:66:63:2d:e0:fc:75:4c:
                    f3:68:be:69:7f:a5:52:de:d7:52:7b:1d:1c:fd:06:
                    27:68:da:2e:ed:18:75:a7:ef:d4:d0:da:0b:b9:26:
                    e6:70:93:87:c0:5b:30:00:7a:d0:40:42:43:d6:90:
                    34:b4:63:01:20:c8:e7:36:46:2c:c9:74:1f:20:44:
                    8d:66:3f:48:9e:64:81:c2:9a:9f:53:0b:05:52:62:
                    e2:a0:21:3a:8f:2c:eb:6d:1e:d7:56:e1:78:f3:8b:
                    c3:b9:4f:2d:10:21:f1:27:bf:53:34:fd:22:51:27:
                    88:4a:eb:41:92:4a:16:e8:ec:1a:9a:96:79:ce:5b:
                    44:2e:90:4f:d9:77:fa:99:53:b1:17:fd:95:fe:49:
                    c7:e8:f4:69:db:dc:88:5f:e9:da:39:49:4e:7f:96:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:56:FE:4F:11:22:D3:61:9C:D8:9D:68:83:90:6C:84:FC:4F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca32579e-b07b-3e8e-9ca2-bd27027328ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:bf:47:c3:c6:53:8d:59:b8:8d:0b:64:41:89:84:d9:b2:a0:
         10:07:56:69:20:e4:75:67:ac:53:68:28:a1:ae:77:de:9d:08:
         f0:5c:9b:80:00:de:90:66:ea:81:35:f0:09:89:b9:3b:22:ca:
         27:c3:64:71:a3:51:6e:c6:bf:df:a6:ad:63:2a:90:6a:62:89:
         f6:cb:3d:f1:45:5a:89:73:95:59:1f:b6:7b:a5:a9:6c:b6:c0:
         d9:57:ff:fd:ed:2c:80:33:0a:41:f4:33:fe:24:5f:8a:06:65:
         80:5d:a6:60:5d:33:7a:fb:9a:2d:24:cf:fc:64:1e:63:d1:6c:
         07:0f:8d:2e:6c:91:d0:82:28:61:c7:dd:ef:26:20:9e:0e:47:
         ac:96:da:fd:75:ac:50:17:0d:21:27:48:ce:24:3b:7f:ee:26:
         a6:d5:f9:80:03:d4:fe:c3:f3:58:42:e8:3c:86:c6:f7:33:fd:
         af:6a:e4:7d:e2:b0:21:80:f4:e1:03:94:36:26:d7:b4:23:f6:
         fa:74:32:2f:1e:8a:8f:48:d1:79:c0:49:fe:f5:7d:82:cb:1a:
         87:be:72:95:4e:f9:b7:ff:8e:70:0b:5e:54:12:c6:b7:87:2d:
         06:89:9f:1d:bb:ac:4a:0d:97:c6:a4:a0:2d:6e:ac:d4:6a:23:
         7b:b3:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:49 2025 by rpki-client