Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
File:                     4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa (raw, json)
Hash identifier:          qS5deIGk1Vi6QR69lvPSPguSU3mGvzf5i70lo/upguE=
Subject key identifier:   AF:45:9B:CE:CA:23:B4:18:2B:6B:7E:A7:99:10:15:ED:72:DC:EF:E4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00660F9B271D8FD75332D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     17359
IP address blocks:        208.89.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:60:f9:b2:71:d8:fd:75:33:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=d8d785e0-4c87-4edd-b13d-d0a579674a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:51:e6:09:7f:ad:a8:ce:57:c1:44:98:4d:
                    43:d2:45:00:10:21:9c:7a:ab:93:a4:d6:a1:fc:f9:
                    b7:0a:2f:8f:47:db:2d:ed:52:7c:ac:15:ce:59:71:
                    4f:b0:e6:be:8f:d4:d1:3f:06:aa:df:ff:5f:2a:6f:
                    72:77:54:86:7d:21:c7:37:85:33:af:d9:35:74:87:
                    93:18:4d:f4:2b:82:e0:4a:9f:6a:b5:79:86:64:e5:
                    90:f7:d9:dc:d2:e7:24:2a:11:82:2d:5c:90:01:c3:
                    84:e6:b8:ca:77:80:87:e1:5d:89:8e:48:1d:e9:f9:
                    73:09:fa:d4:84:f5:81:17:12:63:cf:b8:f2:7d:11:
                    37:07:b0:f5:17:d2:25:0a:1b:82:4a:a4:d4:2b:0f:
                    47:8e:38:9a:05:f2:9a:bb:3a:c2:56:c7:bf:05:ca:
                    91:10:3e:30:e2:16:92:64:ef:9d:8e:3c:10:4d:a9:
                    69:28:4c:34:bd:83:d8:8e:3d:47:8d:4a:21:bb:60:
                    75:ab:72:f5:9a:97:64:a6:cd:bb:03:fc:78:be:89:
                    e5:ba:dd:fd:8e:f2:da:bd:66:0c:92:aa:cc:ab:ff:
                    af:76:16:1f:39:a5:a5:a4:51:a8:89:31:be:07:8b:
                    23:58:5a:0e:9a:6f:aa:dc:70:fd:89:5d:82:78:cb:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:45:9B:CE:CA:23:B4:18:2B:6B:7E:A7:99:10:15:ED:72:DC:EF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:ff:47:9d:a8:7c:fe:ae:3c:2c:76:93:36:8b:b1:db:de:
         f9:81:ac:28:88:b9:b9:59:ac:39:90:ee:46:67:18:85:b9:41:
         90:b4:07:9b:68:b6:0e:c7:57:64:70:fb:a3:8b:73:8d:9b:01:
         21:b9:51:97:65:be:35:40:30:7f:e0:eb:5a:16:f2:99:e7:94:
         43:92:54:07:e3:52:f1:49:7c:f8:8f:bb:15:a1:78:33:5d:a5:
         a0:03:92:5f:14:9b:5b:e0:23:40:38:78:08:54:2e:33:51:d9:
         4c:38:9e:d7:69:bf:17:89:f4:16:a0:df:99:1a:4b:ce:b9:76:
         eb:f1:b1:89:ce:a1:21:d1:f8:c1:4c:db:63:e7:46:3f:21:d3:
         56:08:a3:cd:79:27:2a:ef:6a:d1:8b:1b:7f:03:44:2f:be:08:
         35:8a:4e:4d:a5:83:0c:9c:39:93:3a:5c:07:ee:9f:3c:1a:48:
         86:0e:ce:40:12:74:22:44:80:1d:32:b0:bd:30:31:95:0f:d3:
         29:25:16:7e:cc:32:6a:a4:64:68:67:f9:d6:df:6c:cb:96:2b:
         4b:c3:07:19:02:4e:5c:7b:57:45:0f:0c:5b:15:e8:42:5a:4b:
         5e:fc:61:25:c6:e1:f7:0f:10:3b:b6:ba:b0:dc:d5:d9:ec:ea:
         f6:0f:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:22 2025 by rpki-client