Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa
File:                     2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json)
Hash identifier:          Fbt/S3KQ6gl+bmFJJhc4738OP3in8LPjNdfJbHnNQRk=
Subject key identifier:   15:6A:9A:94:9D:B8:15:97:0C:DF:D7:E4:B1:85:BA:88:4F:61:52:4F
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F432858494731755700C8AB6CBBDC8300
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa
Signing time:             Sun 23 Mar 2025 00:55:52 +0000
ROA not before:           Sun 23 Mar 2025 00:55:52 +0000
ROA not after:            Sat 21 Jun 2025 00:55:52 +0000
asID:                     17044
IP address blocks:        170.200.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:31:75:57:00:c8:ab:6c:bb:dc:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Mar 23 00:55:52 2025 GMT
            Not After : Jun 21 00:55:52 2025 GMT
        Subject: CN=2ecff86f-0631-45b2-9ef2-f5cf1f52bdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:55:8b:37:30:bb:98:da:7a:78:e2:5b:9d:
                    e1:55:64:6a:91:56:c2:a4:54:39:69:2b:2c:7d:67:
                    43:ba:76:06:b6:16:4c:b7:32:81:73:25:b2:9a:7d:
                    bf:2b:af:87:63:a8:b5:8c:93:82:a3:c1:c9:54:76:
                    d7:68:34:a5:1c:fb:5f:59:6a:85:2c:a5:3c:0d:e1:
                    37:20:3e:bc:3f:d6:29:a6:df:f0:00:42:bf:c3:8e:
                    cd:dc:fe:cc:81:6c:11:2c:12:b4:a7:1a:11:76:78:
                    04:b9:15:a4:ce:4a:51:b4:83:ef:b0:be:8a:c7:b2:
                    b8:42:b0:9c:84:45:a8:47:fb:4d:b8:c1:05:83:7f:
                    42:a3:7b:35:b5:a4:17:a3:1a:9b:47:75:aa:9c:c5:
                    7a:82:01:5e:86:07:e4:a1:38:99:3d:dc:5b:ac:49:
                    64:3f:73:44:61:61:f3:bc:22:bb:4e:ad:1a:f4:8a:
                    56:6c:e7:74:03:f9:2f:83:35:4c:ac:48:b6:15:55:
                    73:1d:c4:1a:9e:55:7b:b8:67:04:ba:68:77:2c:8d:
                    a2:44:05:68:3c:e0:06:de:56:1b:65:eb:c0:05:08:
                    30:a3:e6:ea:e0:1c:5d:c5:cf:93:98:bb:25:d5:ad:
                    d0:8a:95:99:a5:0d:4e:e9:ad:7a:48:35:b7:67:4a:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6A:9A:94:9D:B8:15:97:0C:DF:D7:E4:B1:85:BA:88:4F:61:52:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:60:ab:bf:c2:8d:ab:58:19:5d:03:3f:96:f1:2e:81:a3:
         c3:9e:f8:82:d9:59:7a:f5:0b:90:c1:de:5d:a8:ee:ef:42:cb:
         e0:8b:a8:4e:b6:4f:f2:6c:60:56:07:f8:df:63:cd:7f:84:45:
         e0:0a:d3:9d:cf:00:82:be:cd:f7:36:5c:f2:d5:bd:a1:ec:79:
         22:32:d3:ec:c1:8e:4b:ad:65:1a:d5:59:0e:84:27:81:c0:25:
         4c:b5:ba:0f:34:12:c9:d7:5c:6f:17:3f:e9:95:04:df:15:19:
         64:ee:c2:8a:36:02:3d:35:41:bd:60:b0:99:66:0c:f0:e7:a5:
         38:26:2b:d0:68:1c:e5:46:fa:4a:c1:2f:a2:52:01:0d:1b:56:
         42:2b:ed:55:7d:0f:2e:83:49:4b:4f:2c:42:c6:17:e0:7c:83:
         55:78:23:40:97:1e:0f:61:61:e1:64:3a:02:c4:ad:1e:7d:ff:
         93:21:cb:95:1e:ef:43:86:3b:9e:3e:49:a5:24:5c:4d:a3:b3:
         76:e8:fb:39:45:ec:84:ce:c5:6e:e8:dd:6d:78:d1:0c:51:b7:
         7d:b9:0b:c2:b2:e0:d9:f4:d8:26:60:16:ef:96:d7:f4:1c:e2:
         64:1a:9d:ca:f8:ca:a0:b4:8b:91:0c:9f:7f:ee:43:c5:b3:9e:
         e0:8d:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:51 2025 by rpki-client