Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/abb2c0a1-842e-3e14-bc3e-64db7328c1a5.roa
File:                     abb2c0a1-842e-3e14-bc3e-64db7328c1a5.roa (raw, json)
Hash identifier:          lLuVkqtjreMto/AM+LFkREzWJlnaaSdGbPWB8edNoPo=
Subject key identifier:   F5:64:AF:84:56:1A:11:C0:C3:EA:49:F8:EF:B0:60:E6:32:C4:CD:5C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858493540AE6661E30A1D4EE1C080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/abb2c0a1-842e-3e14-bc3e-64db7328c1a5.roa
Signing time:             Sun 16 Mar 2025 14:42:00 +0000
ROA not before:           Sun 16 Mar 2025 14:42:00 +0000
ROA not after:            Sat 14 Jun 2025 14:42:00 +0000
asID:                     834
IP address blocks:        206.206.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:40:ae:66:61:e3:0a:1d:4e:e1:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 16 14:42:00 2025 GMT
            Not After : Jun 14 14:42:00 2025 GMT
        Subject: CN=2bfe7ff8-36d1-4e19-8a0c-1b069f9b3b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:be:c9:e1:ad:52:e7:c8:15:a1:e4:6e:28:
                    98:7c:46:a3:99:9f:70:5f:7a:1c:bc:45:2d:b3:5e:
                    36:40:25:90:53:c8:87:8f:fe:86:3e:e3:e3:25:4e:
                    48:88:b2:60:89:16:94:28:4d:8d:7b:89:3f:6c:a6:
                    7a:4f:eb:3d:68:e9:a3:a7:63:03:eb:da:d3:3e:cb:
                    ec:84:9c:ca:b5:7b:39:3f:b3:20:53:05:86:47:fc:
                    4d:39:78:43:19:d2:0e:68:93:c5:fc:d6:e1:9e:04:
                    cb:d3:a3:c2:ff:42:d6:8d:d5:c3:bc:40:c6:af:01:
                    3e:64:8e:f0:2e:6c:e4:ea:9d:8d:4c:b8:4a:16:e7:
                    f6:15:68:31:d4:ee:d2:5b:57:fd:e2:0d:3a:6a:93:
                    dc:0d:d7:a2:74:90:08:29:c3:1e:0b:a8:a6:db:74:
                    b5:ad:a4:19:a7:bb:76:be:7c:ec:6b:cc:16:bb:1e:
                    67:a8:58:f2:bb:84:1f:92:8a:f6:5b:38:ba:51:85:
                    e8:58:20:0d:d1:8b:3d:b5:07:5c:8c:4f:f7:76:e8:
                    a1:04:d9:38:d9:33:09:ec:0c:1a:97:46:46:0b:fa:
                    12:37:35:7f:40:12:00:41:86:65:2a:7f:79:cf:3e:
                    c3:c6:ac:4d:85:6e:fc:2e:9f:48:d6:06:24:63:ff:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:AF:84:56:1A:11:C0:C3:EA:49:F8:EF:B0:60:E6:32:C4:CD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/abb2c0a1-842e-3e14-bc3e-64db7328c1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:5b:9b:4a:96:aa:74:2c:e3:dd:a5:20:60:f0:2a:ce:74:
         be:a7:67:f7:78:7a:07:cd:2a:ec:1c:61:5c:05:a0:74:17:03:
         87:22:46:5b:27:8b:c4:9a:3c:6e:0a:f2:8c:f9:6c:49:e1:98:
         f7:92:c2:39:df:79:41:df:4b:11:43:58:b2:d8:1c:03:ab:e2:
         e9:a8:31:04:cf:08:40:19:f4:02:24:b1:3c:67:5d:e0:82:0e:
         f2:0b:26:35:a6:65:af:e5:cf:64:30:f9:19:98:36:b2:f1:d6:
         d3:3c:3e:ab:be:58:5c:1f:96:1b:72:09:8d:fa:cd:8b:63:2f:
         21:f7:a1:80:95:79:6b:03:a3:a6:36:5d:46:37:c8:1f:02:b2:
         e7:6a:10:95:16:1e:78:39:15:a3:6b:72:e6:fc:12:c8:f6:cb:
         91:ee:9d:86:2f:43:35:fa:d8:77:3f:9a:cd:c5:5f:e9:c4:b8:
         1d:16:c5:99:59:d9:5f:9c:ae:43:6b:b9:a7:80:60:23:1b:96:
         ab:05:6f:63:fe:3a:24:19:bd:4c:2f:12:b2:40:1a:5b:86:ee:
         e6:35:e0:1e:58:2a:2e:00:87:5a:34:9a:60:15:42:6f:00:97:
         9c:71:22:af:b4:09:8d:f1:dd:8e:44:6a:4f:58:c5:11:88:ce:
         60:3c:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:35 2025 by rpki-client