Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa
File:                     6311df43-7573-3728-a24a-2ed5c41a3398.roa (raw, json)
Hash identifier:          fui/iuR4a+yayDbsMjDr2roZyI0bfDoD3tkfIAN3+9s=
Subject key identifier:   BA:2D:0B:F4:83:6E:E6:54:B7:41:BB:A8:60:B2:14:07:97:F2:15:D6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285848430269737C37709C38866E00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa
Signing time:             Thu 19 Dec 2024 20:10:54 +0000
ROA not before:           Thu 19 Dec 2024 20:10:54 +0000
ROA not after:            Wed 19 Mar 2025 19:10:54 +0000
asID:                     272891
IP address blocks:        200.229.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:02:69:73:7c:37:70:9c:38:86:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec 19 20:10:54 2024 GMT
            Not After : Mar 19 19:10:54 2025 GMT
        Subject: CN=a4b52979-e7b6-48ef-bcf4-12ab5f5123cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:35:f3:4b:53:1d:75:c6:22:b3:59:68:16:
                    5b:e9:b3:d5:a7:97:63:6a:12:b6:e6:45:d5:e0:25:
                    38:e6:70:86:b4:fe:27:f7:ab:2c:74:e6:a6:3a:83:
                    c1:32:1e:0d:93:dd:b6:80:e3:44:69:40:66:5c:9d:
                    78:e3:1d:ba:ea:41:bd:7d:0e:7e:3a:f3:55:38:9f:
                    c4:55:4c:75:c5:c2:09:88:bb:c6:3d:90:0c:7f:56:
                    47:3a:2b:23:78:55:81:1f:ca:08:e3:85:3e:84:19:
                    7d:ea:88:e7:e8:52:06:62:3c:69:46:85:09:61:a1:
                    38:d5:af:d2:2c:d2:ae:40:08:d8:ed:2d:56:bf:6d:
                    ff:60:e1:6c:90:b5:eb:27:98:68:a0:4d:89:fe:58:
                    64:7c:31:0e:fb:34:db:25:79:c1:f7:65:60:b2:65:
                    8d:51:7c:9a:8b:ec:51:91:c7:e7:0c:ec:bc:4b:11:
                    6a:44:9b:c2:d9:cb:1c:d3:e0:62:dc:48:77:7b:34:
                    78:5d:e0:d2:a9:81:e9:b7:9d:4c:5d:fd:4f:73:e2:
                    ff:ba:0e:14:25:e0:29:ae:f7:b2:5a:4a:d1:ab:a9:
                    98:7d:f0:0a:63:f8:da:a5:8a:35:97:79:45:c6:62:
                    25:d2:1e:2c:ce:33:7a:20:57:21:a4:c1:9a:06:ad:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:0B:F4:83:6E:E6:54:B7:41:BB:A8:60:B2:14:07:97:F2:15:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:f6:ab:71:94:8e:b7:1b:02:c5:8b:76:2d:3e:ba:84:f2:
         34:5f:42:d3:1f:fe:b5:05:1b:7a:6f:84:7d:4f:7c:5d:0e:73:
         ff:db:7c:c4:84:c6:8d:4b:09:29:57:65:54:1d:81:9c:7d:5a:
         07:4e:58:ad:7c:d5:87:50:71:6d:ab:54:17:82:d1:9d:3d:90:
         3c:9b:53:10:55:12:fd:3c:f8:04:ed:87:80:e3:54:6c:5c:9f:
         f7:e5:63:f4:f8:a0:22:84:f5:bc:18:8e:37:d2:8d:1e:1b:fb:
         a7:c0:84:95:cd:68:bd:84:e4:59:35:32:96:c8:d7:02:c0:16:
         15:e2:d2:e1:8b:8d:34:52:7d:02:ff:a0:98:6f:1f:65:92:cb:
         b6:05:5b:d7:e8:25:fa:cf:00:f0:20:e7:87:9f:fe:50:45:3a:
         06:f6:de:04:f9:ed:fb:9c:dc:57:9f:33:62:a1:29:be:ff:77:
         b2:ba:ac:f7:af:3c:34:48:4e:40:de:5a:4d:9f:51:39:13:53:
         fe:52:75:8f:98:e4:db:d4:36:e9:1c:61:25:b6:96:31:36:2e:
         59:be:59:ce:cf:9f:6a:fc:ae:d7:fc:45:6c:00:c8:6a:ef:ac:
         dc:bc:fc:ee:26:b4:64:56:e7:0f:cb:00:b9:70:0a:c4:33:26:
         61:e6:4d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:39 2025 by rpki-client