Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa
File:                     71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa (raw, json)
Hash identifier:          rsAZm9Oq9+9XkLhTKPHs0RNq0dzG4XwRaPe7s1KaN0o=
Subject key identifier:   EA:20:23:0D:1C:FE:22:26:F6:A2:29:24:F3:0D:FB:50:E5:5C:1D:0F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B626180A6C3334C49201A7A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        208.181.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:18:0a:6c:33:34:c4:92:01:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=81f8a9a9-c7b7-4bdd-b991-bb3dd9e157fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:a0:6d:d4:e3:af:fe:e1:79:c6:3c:b2:64:
                    08:00:ad:9b:25:c6:54:54:6c:86:12:8c:7c:b9:2c:
                    c9:c9:df:89:64:7d:e6:67:0a:cd:f8:f9:2d:b3:33:
                    ef:7a:a7:94:9c:28:92:b3:2c:81:05:4b:83:2f:9e:
                    41:79:09:b8:34:3b:aa:4d:28:a7:1e:36:12:7e:ad:
                    07:2b:5a:54:82:d6:b3:0d:b6:1b:fb:ba:9f:d4:cc:
                    2b:17:72:b7:12:6c:f5:0c:bf:c8:38:72:bc:54:ec:
                    e7:25:81:8b:d5:a2:2b:3f:cd:61:9e:b8:7f:f5:be:
                    c6:77:4e:21:18:5e:2d:fd:fc:34:17:74:78:ae:c4:
                    00:2c:c4:f0:12:a2:bb:57:e8:8e:ae:5e:a0:5b:fb:
                    be:ad:9a:d2:95:2c:bb:c5:2e:4f:61:17:27:e5:96:
                    28:5c:4b:f7:6e:b8:b4:12:6b:7e:aa:2b:df:da:f7:
                    5f:60:19:7a:36:4d:df:b0:3c:a7:0c:1b:cd:73:2c:
                    7b:4d:16:e5:8c:68:ab:ce:4d:f9:9b:e4:6d:01:5f:
                    ad:6c:94:be:85:13:77:b6:3f:ad:48:9e:06:05:4c:
                    dd:a1:0e:ec:07:c7:b9:24:3b:2d:6c:06:a4:91:48:
                    6a:72:20:df:3a:83:71:d4:b7:21:6b:50:ea:5e:c6:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:23:0D:1C:FE:22:26:F6:A2:29:24:F3:0D:FB:50:E5:5C:1D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:14:b9:05:36:3c:70:4d:08:d7:7c:fa:63:e0:e2:4d:58:
         e1:46:61:57:c7:fb:ad:20:f4:d0:a5:56:65:71:6a:7e:8f:8c:
         42:b5:7d:53:04:d8:f3:a0:8c:0b:d0:a1:fa:30:78:7d:67:2f:
         fe:f9:9f:e0:b5:e4:f3:f1:3b:3a:f5:b3:a8:2b:f0:37:06:9c:
         e3:6a:74:33:74:6a:a0:52:ad:d9:74:ce:5d:f0:27:fa:14:16:
         f9:7f:e9:dc:5c:47:26:18:ef:7f:86:cc:0e:46:b0:57:cb:bc:
         6f:93:12:8a:3f:e6:e3:60:e3:c5:68:77:7a:f1:a0:83:e7:50:
         b5:bc:14:3b:37:1a:3a:a2:77:c4:a8:75:96:b6:fa:ff:01:22:
         b2:b2:c2:1f:5c:88:1f:83:19:68:2f:ea:30:7a:ec:07:24:89:
         71:7c:27:fa:e3:39:51:2d:d4:c1:1e:5f:2f:ef:00:a3:41:0d:
         09:db:3b:20:0f:ce:42:ba:3d:52:65:db:5d:85:49:c0:44:a2:
         b9:d6:4a:cc:c7:e7:69:48:e2:c5:65:2c:20:18:52:45:ff:72:
         8b:f9:a0:7e:b8:04:99:be:3a:2b:af:51:3c:fb:b0:23:8d:70:
         6e:2b:d0:bd:18:1b:d5:9b:38:80:1b:42:db:56:f4:4b:ad:90:
         82:c9:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:56 2025 by rpki-client