Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa
File:                     c97910cc-243c-32df-8616-c22e1a078349.roa (raw, json)
Hash identifier:          ACT2uxCgZJ5lZpk7iBsgRC5kJE53hghmHjzeNCnaTmU=
Subject key identifier:   8E:FE:59:2F:63:8D:2B:B9:B2:AD:73:4A:34:C4:FA:70:B1:42:7E:F5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858488815EC69445182C8D417E100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        209.251.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:ec:69:44:51:82:c8:d4:17:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=ec46e669-db4c-4051-aef1-8ec61a515891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:a1:c4:90:39:01:c6:5f:1c:94:7b:5a:7c:
                    fe:5f:95:6d:54:75:86:0b:32:83:b1:0e:36:b1:e5:
                    ff:4f:99:a3:4d:3d:72:ba:07:76:e4:cd:e3:ec:22:
                    13:0f:63:28:40:7d:75:2c:c9:36:e4:eb:82:f9:22:
                    6d:9c:86:fe:11:41:ba:d5:56:6a:fc:a4:d0:3f:11:
                    15:a7:e7:64:90:a2:70:69:90:6d:6e:64:e9:1e:53:
                    c5:b8:68:21:32:01:c2:c3:e5:e6:7b:b6:e4:56:9a:
                    40:1d:fd:66:8f:09:e7:c6:df:63:b2:b8:12:c0:5c:
                    2b:02:b8:f5:c0:d1:a2:e8:f3:01:f8:80:86:75:85:
                    7e:ad:bb:bd:f2:05:11:71:c3:80:6d:ad:29:25:f3:
                    a9:34:3c:33:dc:39:b2:07:36:f6:9c:2c:ac:af:c4:
                    a1:75:a0:08:f1:d6:76:11:17:37:97:52:0d:eb:7b:
                    9f:52:f8:95:bc:39:a5:9d:48:7c:18:1e:b4:36:2d:
                    81:8f:13:ab:db:3e:2d:c5:a8:b1:f5:2a:af:4c:6a:
                    63:b3:73:bf:bb:e9:58:58:23:84:5d:7c:33:1f:7b:
                    92:12:34:4d:af:73:da:b9:e0:18:a0:fc:8a:2a:06:
                    31:84:1d:8d:47:36:af:93:6a:31:46:c5:02:a0:99:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FE:59:2F:63:8D:2B:B9:B2:AD:73:4A:34:C4:FA:70:B1:42:7E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:cc:89:b2:08:32:c0:bf:a6:4c:87:3d:ae:0f:d4:26:6b:
         3c:7b:e4:53:37:7e:dc:4e:e2:a1:62:5b:e1:94:74:3d:cc:81:
         78:a8:53:67:32:f1:c7:e1:fd:bd:ed:6b:cb:df:36:a3:53:4b:
         a5:60:f2:84:d6:ac:e4:26:6c:a8:70:1b:cd:41:d1:7e:c6:03:
         ab:fe:e2:1d:5c:18:81:9f:50:ee:00:b3:6c:a4:6d:c6:a7:09:
         61:d4:0a:4c:b1:33:94:2b:2a:dc:5f:b6:18:26:60:65:e0:ae:
         42:9b:da:f8:04:59:06:1b:62:03:a5:1e:da:7b:4b:87:d8:ea:
         fe:c8:6a:42:d5:f5:6b:9f:00:dd:37:83:85:d3:49:81:20:e1:
         55:00:42:32:eb:3b:0a:06:57:8a:7f:23:b9:64:92:f9:26:b7:
         6c:93:5e:2a:91:a9:f9:53:00:d2:39:64:29:63:61:97:e1:68:
         9d:1d:aa:f2:0d:98:8c:3d:68:da:5b:f8:db:cd:4b:ac:2d:5e:
         69:a5:55:57:00:4d:c0:ca:86:b0:66:b6:cf:21:5d:31:7c:08:
         65:a6:41:8d:78:ed:85:6a:ba:6f:39:c5:f5:c4:9d:cf:d0:52:
         32:35:b5:7e:fb:e0:4a:eb:12:6a:7d:ec:72:5f:4a:14:8b:2e:
         ce:13:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:44:31 2025 by rpki-client