Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
File:                     dc6b981b-3332-38fa-b76d-e398bcf36767.roa (raw, json)
Hash identifier:          WSf01zjhOeCS8ZLiqUbhIaNUe27Nt5aJ3NvvxAfKv2I=
Subject key identifier:   CF:96:56:CD:8C:C2:16:22:E1:3C:2C:AB:2E:01:AF:A1:AA:3F:A6:FE
Certificate issuer:       /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial:       010D0C9F43285848AF2B82893F7CA76DD7A79400
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     20473
IP address blocks:        67.159.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:82:89:3f:7c:a7:6d:d7:a7:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=57b3794f-4f0a-402d-9c1d-eadc556c4c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:3f:7b:1a:fb:ab:1d:ad:88:72:84:d2:96:
                    18:16:63:8d:f4:fb:fa:d2:73:f8:7a:4c:9b:0f:3a:
                    fa:8e:de:f6:6b:db:73:08:44:07:08:7a:2a:08:36:
                    c6:3e:57:38:d7:45:d3:50:95:ed:4c:d9:8c:37:4f:
                    96:0f:69:58:96:8e:34:49:b7:26:b9:c3:48:73:d7:
                    02:d5:3f:ad:cb:fb:bc:9f:3f:ec:4c:1f:d3:0e:4c:
                    90:1b:ba:63:42:bd:4f:ed:71:ee:10:ba:24:ce:c0:
                    b5:57:e8:23:b8:66:47:ee:b6:e2:12:fa:6e:5e:ed:
                    5d:46:22:64:ff:53:29:81:dc:64:ae:88:b2:5e:29:
                    af:e8:08:53:0a:6a:b5:54:0f:04:f5:a4:a4:b1:c2:
                    26:50:6a:45:2d:88:65:cb:d0:d4:81:f8:c5:df:01:
                    56:09:70:67:c5:36:65:57:ec:d9:dd:d9:69:d8:e1:
                    1c:c2:6d:9a:8f:8f:dc:85:e7:95:4e:7b:b0:17:96:
                    3d:50:81:2a:56:f9:6a:9a:66:f0:05:14:0f:4d:d1:
                    89:75:3f:74:1c:6e:06:b5:53:cb:37:45:da:05:71:
                    d6:ef:fc:8c:7e:48:e7:bd:cc:dc:32:06:3c:ec:6a:
                    4f:0d:07:2c:20:1e:7b:64:22:90:92:01:fd:81:cb:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:56:CD:8C:C2:16:22:E1:3C:2C:AB:2E:01:AF:A1:AA:3F:A6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl

            X509v3 Authority Key Identifier:
                keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:94:7d:6b:53:88:d6:15:b8:22:07:28:f7:46:13:57:d3:
         3e:1a:1d:52:1e:df:c4:cc:82:11:4f:ca:9a:6f:86:f0:21:72:
         7b:2e:b4:6e:44:37:f1:16:72:07:87:63:c6:49:27:d0:de:eb:
         5b:98:f2:6e:46:f7:d7:cd:22:7b:5d:f4:0c:36:b1:ef:f3:04:
         22:ea:c1:be:43:05:19:1c:ed:b8:cf:cc:46:80:d2:af:fb:fa:
         66:2d:03:95:bf:f8:f2:68:57:69:9a:7c:29:42:9f:e1:cb:bb:
         31:cb:4b:b7:b7:ef:2a:fb:d0:ce:72:d2:c9:a0:a5:4b:e3:82:
         18:2c:76:f1:36:a4:d2:2d:08:85:ed:82:74:24:4c:18:31:27:
         ed:36:83:9b:60:73:4f:a4:4b:7d:e8:c8:ed:e6:9f:2d:68:09:
         51:06:07:8a:6a:96:ab:7a:22:21:c5:73:4c:fa:3e:fb:90:1e:
         6d:b1:bf:a9:a4:84:c4:f0:20:4a:1f:77:83:d5:d7:c5:64:8e:
         b1:f9:ab:26:a8:53:39:ae:0b:c4:77:34:16:10:f4:5b:0f:3d:
         e1:85:b7:b9:3e:09:e6:c9:54:aa:a2:2f:1b:9b:4b:b2:46:97:
         fa:58:c2:f7:d0:c5:98:b2:bf:6a:d3:0a:0f:97:ed:03:b8:0e:
         33:31:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:28 2025 by rpki-client