Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa
File:                     7d3a6f69-a7a5-360a-9bae-570514940a1f.roa (raw, json)
Hash identifier:          1YTr/hZmagTfNtmJLwGMBYr5N/LH9JYlTRdmDZI3uKw=
Subject key identifier:   66:ED:E3:D6:31:CD:56:F3:0C:C6:9D:D8:A5:4A:2A:D1:64:ED:95:A0
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F432858487B85B04673CE0155E807AF80
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        170.200.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b0:46:73:ce:01:55:e8:07:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=4a30ead5-9872-4eef-ab45-6c1a33ee4a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:99:8b:b7:d5:98:76:0e:fa:cb:18:f4:33:
                    ac:61:2d:d4:8e:69:d7:cb:0c:aa:67:e3:04:3c:87:
                    a9:9b:4b:bb:13:44:b7:67:8e:09:36:35:b2:bd:3d:
                    0e:26:a3:d9:d8:cf:e4:6e:06:7b:5f:91:38:f6:25:
                    fb:cf:db:ef:d6:61:1f:a1:97:b3:ad:c1:14:26:16:
                    7f:db:7f:cf:fa:9a:32:61:e0:55:18:87:0b:0b:da:
                    1c:3e:0f:77:8e:b2:4e:3f:9c:64:bd:e1:5a:58:7c:
                    06:f3:cb:43:c3:db:2d:e2:65:bd:5a:93:62:27:01:
                    90:e4:7d:54:d1:e1:be:6c:98:cb:61:57:89:0c:47:
                    a0:c0:a3:9b:40:dc:17:27:bd:bb:9a:6e:2d:3c:63:
                    08:ee:31:df:4c:71:35:a8:42:70:c5:10:ac:44:1c:
                    6a:fa:af:e0:ab:26:2d:34:74:66:b7:70:be:c2:19:
                    62:e9:df:52:bc:ef:0e:6b:41:96:4b:ce:93:18:9c:
                    f4:ff:fb:d6:ff:ea:c8:e5:83:ef:6c:70:96:4b:7c:
                    5d:ad:7b:63:82:c2:e8:dd:c2:d2:5b:28:38:2b:1f:
                    cb:f8:84:af:68:dc:aa:f0:f4:d1:d6:a3:06:a2:e9:
                    16:69:0a:de:87:2f:5b:20:7d:c2:3e:f7:82:26:30:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:E3:D6:31:CD:56:F3:0C:C6:9D:D8:A5:4A:2A:D1:64:ED:95:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:30:e2:7c:56:fe:25:63:7e:ef:f8:59:dc:c0:1f:48:f7:
         e9:1b:3b:13:2d:87:6b:6d:49:45:bb:8b:7c:ab:b4:67:25:8a:
         79:22:77:8b:0d:7e:73:c5:06:46:e1:e6:e4:95:eb:de:90:c6:
         95:6b:7e:84:f0:96:e4:4e:ad:19:5e:8f:e4:b3:8e:e9:f9:9f:
         41:b2:e3:1c:bd:5f:80:95:55:4f:13:b1:c3:64:4c:f1:80:31:
         96:0e:0c:a1:04:1f:7c:8c:58:7d:af:80:27:b9:f2:6b:97:5b:
         9c:e7:78:aa:96:c2:f5:49:ad:ee:80:d1:1a:ac:93:5f:a0:26:
         70:8e:ae:dd:4f:b6:7b:25:28:d5:61:62:8c:d4:51:f8:07:de:
         12:c1:d8:cd:22:2b:55:d3:26:08:83:c7:f6:0f:c1:8c:e7:8c:
         82:1f:d6:0c:21:da:bf:82:37:64:fe:40:65:13:14:98:52:d8:
         8c:89:c2:52:dd:03:39:05:33:ac:fe:65:99:65:60:84:aa:87:
         84:62:1a:45:4b:a5:25:a6:d1:e6:10:48:c6:2d:c3:90:85:dd:
         4e:d0:59:31:0a:94:43:18:67:bb:e7:9b:7a:2f:15:d5:ce:8e:
         2e:5b:62:c2:00:99:62:4c:ce:b2:d1:77:0c:b9:b0:6f:5a:d6:
         7a:ea:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:25 2025 by rpki-client