Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa
File:                     d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa (raw, json)
Hash identifier:          JP/8hsO/mZZ94Ft/aQQpXFwYNldNqtBf9X3fVPQYA8o=
Subject key identifier:   24:06:84:B5:8C:E8:A5:92:D8:A4:99:11:61:70:8C:C7:4A:2B:B1:1F
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858488F107E09DE2D0C592456D6E0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     22142
IP address blocks:        216.66.210.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:7e:09:de:2d:0c:59:24:56:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=8854192b-2476-4163-ad54-d9fee2026450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:af:5b:33:08:9a:13:76:3f:4a:55:88:74:
                    50:e1:d4:52:65:eb:a6:a5:24:33:74:b2:bf:e9:c5:
                    58:4c:4e:de:d4:ea:9e:c2:18:f8:4f:cc:d1:02:de:
                    f5:a0:05:f1:ed:0a:ab:bb:2f:d4:0c:e4:9f:55:82:
                    87:95:19:6a:68:4b:b7:5a:e6:5c:4c:91:04:0f:96:
                    ad:af:d6:af:45:95:33:0b:b5:5f:13:aa:a3:88:d0:
                    da:6a:84:50:b1:0b:e6:95:39:6c:da:77:35:90:a6:
                    3b:15:fb:82:9e:74:69:4a:e2:1f:c1:ee:b2:a6:d9:
                    90:0d:27:06:7b:82:6b:9c:11:51:eb:1f:79:3a:a4:
                    6b:59:7c:aa:6b:be:72:53:ed:29:07:06:b7:b7:9b:
                    6f:69:e6:a8:3f:f1:db:a0:54:13:a2:b1:ef:fc:54:
                    e2:72:c3:39:63:c1:04:f6:5d:f3:36:b4:4e:de:ac:
                    4c:c2:12:c5:5a:f4:93:32:48:a6:d4:2a:00:bf:86:
                    0c:2f:eb:a1:f8:16:3e:c3:b1:25:76:31:49:2c:3f:
                    a2:d3:ac:2b:af:a1:c8:76:8e:3f:a4:62:69:36:01:
                    b7:aa:21:8a:bb:2e:d2:4e:9f:48:60:08:84:d6:5f:
                    cc:08:91:9f:2a:46:6f:4f:92:12:fb:56:e1:5a:79:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:84:B5:8C:E8:A5:92:D8:A4:99:11:61:70:8C:C7:4A:2B:B1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:e5:ac:8a:a3:7b:48:bf:84:ad:d8:89:8c:1d:21:c2:79:
         65:73:32:49:25:31:cb:11:b4:ed:9c:9e:4e:e8:ce:26:19:ab:
         ab:59:0b:43:e7:f2:18:d9:3c:0f:df:bf:b9:52:66:2d:2a:87:
         7c:30:48:da:63:e4:7d:3a:33:d1:be:3c:83:54:0f:7f:c5:6e:
         60:35:ff:b2:b2:3d:12:db:ca:b4:49:b3:0e:f1:a7:a7:e0:46:
         24:40:ee:97:91:d3:57:06:16:3a:c5:71:f3:47:bd:89:c7:77:
         36:94:ce:40:81:c8:11:c6:fc:89:32:e1:7f:e0:62:7e:72:4c:
         f4:78:05:15:a5:39:53:e5:a9:ab:ea:68:ed:76:a9:9b:cd:70:
         b2:cc:82:c9:e0:9a:6d:9c:ae:bf:d2:d1:db:94:95:74:f4:d2:
         f0:00:67:4f:5f:57:73:5c:f0:90:2b:eb:46:1c:86:c0:98:cf:
         1b:dd:b3:27:f9:22:c9:b8:0e:05:55:3a:bb:70:dc:b7:68:33:
         76:0f:b9:1c:c2:f2:14:97:42:af:37:b0:90:4a:62:55:7e:a0:
         cd:61:bb:5d:9d:21:8d:a1:13:75:dd:ff:b9:7e:a1:d3:7b:ea:
         d9:ed:92:e8:d3:1d:86:90:4a:7e:55:f5:cf:d7:32:84:cf:29:
         a3:e5:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:10 2025 by rpki-client