Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d14b6851-ccc2-306c-841f-a2be20b6bb83.roa
File:                     d14b6851-ccc2-306c-841f-a2be20b6bb83.roa (raw, json)
Hash identifier:          +GkjcUxXbIETdaKIMMz/QY1LN+AZFh8HJ5x9Emk90Zg=
Subject key identifier:   83:C1:E4:D2:89:A2:19:A9:C9:88:08:AE:3F:FD:05:C1:C3:6C:19:CF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858467424D91330341843D2C58380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d14b6851-ccc2-306c-841f-a2be20b6bb83.roa
Signing time:             Sun 07 Jul 2024 01:00:25 +0000
ROA not before:           Sun 07 Jul 2024 01:00:25 +0000
ROA not after:            Sat 05 Oct 2024 01:00:25 +0000
asID:                     5065
IP address blocks:        206.206.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:74:24:d9:13:30:34:18:43:d2:c5:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  7 01:00:25 2024 GMT
            Not After : Oct  5 01:00:25 2024 GMT
        Subject: CN=26e1612e-dcf5-4b2d-8bc1-05dcb1843454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:fe:16:e6:a3:28:b8:d7:87:a2:b7:dc:d8:
                    00:32:e6:e8:6d:e4:56:44:35:af:9a:3f:73:72:18:
                    da:9d:49:94:fe:d2:92:40:16:c7:f0:3e:c3:ea:38:
                    af:71:59:9d:fa:2c:2a:92:72:70:a8:fc:5e:ee:96:
                    6d:ef:03:3a:5d:cd:be:ab:d6:11:ea:a6:e1:2d:64:
                    d5:75:23:68:62:ec:34:a9:b5:99:61:bf:ef:fb:02:
                    94:85:9a:1c:df:d2:8e:31:5d:5f:fc:f0:b0:26:c6:
                    9d:c9:bc:65:5b:6d:e8:b5:3d:86:2f:ad:f4:16:3d:
                    98:39:c9:ac:b1:bf:2c:6f:11:0c:59:79:6c:09:bb:
                    03:99:21:c2:20:da:da:7c:19:a2:07:16:60:4a:ee:
                    67:e3:8a:2f:95:ff:de:7c:a0:60:ea:2d:86:9f:d8:
                    87:51:85:57:45:17:df:b2:92:55:68:0c:40:af:50:
                    e4:b0:ff:6f:57:3d:96:e3:fb:02:68:c7:1b:64:04:
                    a3:2b:18:40:00:96:1e:5f:76:27:33:0a:6a:07:74:
                    a1:07:40:a9:55:e5:32:a7:40:5a:9b:e4:2a:5d:f8:
                    ef:8a:a8:82:4e:a2:90:2f:14:63:db:9b:4f:eb:79:
                    c1:78:fb:8d:b9:62:b9:d6:4f:8e:58:ed:5a:45:47:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:E4:D2:89:A2:19:A9:C9:88:08:AE:3F:FD:05:C1:C3:6C:19:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d14b6851-ccc2-306c-841f-a2be20b6bb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:64:f7:81:bf:39:16:1b:c5:63:1e:84:2d:df:06:75:0e:
         eb:6c:dc:15:07:49:f8:06:86:71:39:9f:02:be:8c:51:94:9f:
         89:f1:be:34:29:57:09:25:d1:61:a2:9d:3b:1f:cc:d6:f9:5a:
         5b:b4:94:85:e7:0f:1e:e3:4f:a5:06:42:ee:3d:b8:bd:cc:4a:
         24:45:72:c9:d9:af:d3:a4:d2:3f:aa:ea:b9:f7:90:6d:7f:03:
         f6:65:8d:c4:04:c7:76:6e:d9:e7:2f:0f:12:55:b5:48:32:c1:
         0c:35:a9:6d:42:db:73:be:91:a9:cb:31:35:2d:32:56:b2:aa:
         39:e8:b6:6e:3c:bb:bb:0a:70:f7:92:4a:18:5c:42:58:17:21:
         f6:24:d9:80:00:88:de:61:46:9a:9f:e8:d2:cd:37:81:3c:bf:
         41:80:33:74:f0:60:bc:dd:62:4f:f8:92:89:24:fc:00:4e:c9:
         c7:8c:f0:50:59:f6:e9:b8:ad:6f:82:c3:86:73:4b:01:fa:1b:
         9b:38:b5:48:67:18:f9:3d:51:b1:17:ab:f7:dd:09:0d:b7:bb:
         6f:c5:52:73:34:ea:de:45:08:3b:c1:42:ab:69:38:1c:ab:ca:
         ce:59:d3:e0:f1:f8:53:26:eb:8c:f5:4e:a7:de:52:ed:34:9e:
         79:8f:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:12 2025 by rpki-client