Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
File:                     c4f8707e-8024-3449-9a43-a9af164495b9.roa (raw, json)
Hash identifier:          Elugt8Ls3EG9LTO+odxnRgmb6QfF0EXG+ZEx8WeR6/Q=
Subject key identifier:   95:91:89:E7:27:46:F3:17:2E:29:EC:25:84:17:91:2F:4A:48:49:3A
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285849244E886E460880C54A4885E0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     57043
IP address blocks:        208.67.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:88:6e:46:08:80:c5:4a:48:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=b6836c92-e788-4ec3-b1bb-99e00953dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:31:2d:7a:b0:be:c0:bf:27:3a:e5:6d:53:
                    65:9d:79:5c:b4:27:70:19:19:86:65:72:25:7d:92:
                    17:b6:1d:78:f0:46:18:c6:d5:8f:88:bb:67:2f:da:
                    9a:9d:8a:31:44:22:b8:3f:66:1e:43:80:bc:1b:ac:
                    05:96:50:63:3f:3e:69:e7:da:75:36:b4:99:af:59:
                    00:38:7d:88:ea:80:c7:27:e4:e5:17:d0:11:ff:70:
                    b9:7f:a7:63:0a:c2:ef:7e:b0:e8:e5:b3:f7:b0:9e:
                    e0:0a:68:22:b9:dc:06:58:b8:fd:13:90:8b:6d:5e:
                    2a:11:c7:35:04:08:52:44:10:31:86:13:1d:0b:72:
                    e8:5e:ad:27:ec:eb:cf:74:92:83:1e:e7:0f:20:5a:
                    f9:48:33:1d:8e:93:60:04:e2:5b:a7:6f:3e:99:da:
                    2f:4d:fd:47:85:cd:b2:e7:42:40:a0:24:3a:3c:32:
                    05:99:2e:d7:11:c6:e3:d2:87:69:7c:09:1f:ed:f4:
                    eb:95:a0:cc:15:f4:07:e0:58:16:e9:28:a7:f6:07:
                    df:8d:b5:16:ce:32:35:52:0b:32:47:4e:99:80:38:
                    1e:7a:37:9f:96:ef:b0:7e:e2:fe:86:67:d4:c1:46:
                    46:32:23:a3:c9:aa:63:dd:6e:f0:11:1f:c3:70:b7:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:89:E7:27:46:F3:17:2E:29:EC:25:84:17:91:2F:4A:48:49:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:91:d1:ee:a7:42:a6:d7:bf:2f:2b:ed:74:85:1a:44:6f:
         d8:9c:4c:b1:83:8d:94:6c:03:4b:91:b7:35:87:bf:9b:b4:fb:
         d2:58:db:4e:e5:5e:8a:15:46:d6:5c:41:11:9b:c6:9d:14:67:
         55:5d:4f:03:cf:23:62:d1:c1:4f:4e:26:2f:ed:70:49:de:3c:
         c7:7b:15:9e:4d:f8:47:5d:09:05:c4:01:86:a4:24:be:d2:17:
         7d:59:51:ef:23:0e:66:a8:62:e1:bc:ae:54:f7:b5:0c:7b:e0:
         3e:43:7f:4f:98:4b:c8:e2:0e:94:ff:ee:01:6a:e5:39:bb:c3:
         dc:c0:87:41:fd:6d:cb:bf:b9:e1:70:24:de:bd:fb:4b:cf:05:
         f3:d7:cf:50:71:30:af:de:88:7c:3d:dc:c9:d2:88:4d:b5:b1:
         5d:4c:23:6d:4e:df:1b:8c:31:d6:3f:4d:f1:75:4c:01:94:f3:
         0d:b9:66:f9:ef:14:0e:bc:39:e4:7c:60:9b:aa:0a:9b:be:6d:
         d5:75:7c:d7:51:c2:cc:c2:0b:4e:b5:63:45:c5:6c:cb:4c:f0:
         69:a1:d8:3b:79:68:49:78:b6:f7:f0:39:cb:1c:b9:7f:71:2d:
         f2:f1:49:cc:d3:f0:d3:76:ad:13:a7:47:50:f1:1c:b2:c7:91:
         7d:44:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:16 2025 by rpki-client