Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/cbed1f32-3ca8-3c6c-ad8d-e452b71592a0.roa
File:                     cbed1f32-3ca8-3c6c-ad8d-e452b71592a0.roa (raw, json)
Hash identifier:          2/PsUaWLhRDtFf2z7TjC/qHTDRADiAZrNSl8br0An6g=
Subject key identifier:   C8:47:CA:49:B9:48:42:A2:E6:C8:44:FE:04:7E:E4:50:0D:6C:B6:69
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584905B6ADA7D5E55178774C6380
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/cbed1f32-3ca8-3c6c-ad8d-e452b71592a0.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     17408
IP address blocks:        216.179.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ad:a7:d5:e5:51:78:77:4c:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=8e422438-4b77-4aa8-a761-fac60f7ffc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:27:d9:41:38:e7:c5:f4:2f:63:0e:79:6f:
                    49:7a:e6:43:5c:ad:9b:a3:0d:45:b8:94:a9:6e:6c:
                    87:e8:af:20:ab:05:e5:ca:91:da:01:f2:e4:e1:6d:
                    f7:0d:3c:cd:f9:f5:ea:b5:1e:00:de:e9:37:be:ef:
                    bc:3a:7e:a5:c5:82:53:53:dd:97:bc:bf:84:63:4c:
                    33:3e:18:72:02:8d:3e:c7:eb:80:04:91:11:0a:25:
                    03:53:8c:15:7e:97:1e:3b:c7:b0:4d:6d:b4:ff:99:
                    30:08:de:33:c8:14:bd:aa:48:ad:41:6f:f4:26:aa:
                    84:78:08:d8:9a:96:a7:f1:94:ce:67:c1:bf:de:91:
                    ef:2d:e0:b8:f4:c5:1f:46:91:85:e0:aa:fb:d0:a3:
                    29:e9:51:76:9e:fc:98:69:e9:2c:f8:d7:d8:87:c4:
                    0b:0f:fd:85:f1:c5:62:a5:59:bf:46:92:00:93:4b:
                    f6:50:19:57:38:41:3e:34:da:83:7a:d1:6c:17:4e:
                    15:70:a9:31:62:d7:53:3f:17:1e:27:86:9e:35:0d:
                    f8:36:d6:ec:fb:58:ac:a7:c6:ac:cf:45:bf:2e:12:
                    56:01:b3:e5:c2:13:e1:46:f5:4e:72:4e:b4:3f:77:
                    d6:fd:5c:e8:63:b2:32:bf:10:11:35:4b:b6:c3:e0:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:CA:49:B9:48:42:A2:E6:C8:44:FE:04:7E:E4:50:0D:6C:B6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/cbed1f32-3ca8-3c6c-ad8d-e452b71592a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:e9:b3:a1:49:72:1d:e4:20:43:a7:de:0a:52:55:1b:21:
         c5:36:2a:bd:2a:f8:d4:92:8f:a1:ee:cb:3d:ed:b4:bc:d8:ea:
         60:bb:2b:2b:7b:fc:6a:95:a6:be:a1:96:48:45:4c:c8:18:20:
         2c:3d:18:d0:ac:12:66:c8:5f:08:6e:b5:3d:44:77:2d:a2:da:
         38:8d:ac:34:31:0f:85:da:65:38:79:a6:a9:51:fe:b9:e6:36:
         ef:2d:9a:1f:ec:ac:fc:45:22:3f:c0:e3:be:af:56:e7:bb:46:
         e2:58:f6:f5:86:b7:21:61:eb:fd:2d:24:ea:b0:f8:ee:22:52:
         d6:34:8d:12:81:0c:36:7c:df:04:bd:ea:41:48:d2:86:60:21:
         5e:8d:d1:85:32:95:64:6a:c3:c9:5e:a4:5c:09:f8:b3:9a:fd:
         ed:c7:18:37:e2:df:61:f5:16:75:5b:89:8a:88:54:eb:ca:2a:
         86:64:5c:79:52:ef:60:a0:4f:ac:66:8f:b0:3f:fe:17:2f:bf:
         21:8e:34:c0:ce:e5:f3:5d:ae:6f:fc:83:b2:d2:b2:20:08:2a:
         87:2a:56:8b:a6:9b:dc:dc:6f:58:03:c3:b9:97:b3:28:53:d0:
         c9:32:a5:da:a8:1c:2c:94:e5:8d:4c:a4:e1:93:f0:52:ab:57:
         4e:49:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:42 2025 by rpki-client