Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
File:                     f68425d8-af31-3e65-8fad-c48489a0f510.roa (raw, json)
Hash identifier:          raF07l2c3/QAuSlZIqTlU5cemkFWQj1cd1hk3sk0pts=
Subject key identifier:   18:62:A1:6F:4B:38:67:BC:4B:A2:77:E1:97:A9:04:1E:70:50:5D:16
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F432858492E13BDD17FE58AE927564380
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     398068
IP address blocks:        206.227.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bd:d1:7f:e5:8a:e9:27:56:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=6e17a836-77d2-4db1-94cf-667a67b496e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:52:16:9b:f9:59:e7:28:b4:37:ca:94:44:
                    ef:99:06:67:31:4d:3b:71:a5:17:e7:77:2b:3d:9d:
                    69:59:4a:33:d0:75:53:c5:c2:47:16:c2:b5:ef:1d:
                    ce:17:cd:66:6f:58:08:be:9b:3f:04:03:ef:1c:b6:
                    c8:94:93:09:4f:0f:fe:bc:d1:a6:a1:b1:71:70:a4:
                    8e:3f:77:16:8f:36:37:dd:28:66:c8:98:15:b5:6d:
                    ba:d4:f2:c8:68:35:34:39:db:75:a1:d3:d5:fd:fd:
                    d2:c2:6f:f6:ca:cc:60:3c:1e:f9:14:cf:a8:28:40:
                    fe:f9:dc:97:e8:b0:76:19:00:9a:2a:bb:fd:56:e7:
                    49:15:99:89:b8:a4:71:f4:1d:cc:77:14:13:4e:9f:
                    d2:b9:de:0a:61:b0:1b:32:6c:5f:ae:4f:c4:5f:41:
                    2f:60:cc:6c:ca:31:ee:0d:ba:87:54:14:a3:f6:36:
                    62:fe:a2:69:dd:a4:0d:83:75:9b:1f:6f:7b:87:17:
                    04:c5:ed:f9:ee:4d:ea:6a:2a:15:f6:76:48:32:fa:
                    97:77:56:03:2c:23:e8:13:78:b7:dd:10:f8:15:32:
                    7a:d1:f4:16:af:f3:d4:1a:10:4f:9b:93:db:5f:dc:
                    10:96:3e:b7:ea:bc:58:59:f8:19:3e:e6:f6:a7:8f:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:A1:6F:4B:38:67:BC:4B:A2:77:E1:97:A9:04:1E:70:50:5D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:e1:85:2a:44:b9:59:b1:ce:46:69:ad:5a:41:7b:94:e8:
         66:00:4d:29:65:d3:db:89:18:be:64:22:2f:9d:9c:10:ba:da:
         d5:2d:ed:1f:40:ec:bd:86:7d:34:2b:80:77:e2:ad:2e:f2:58:
         cf:4e:20:ef:43:e3:47:b8:81:90:cf:d4:d1:5f:d5:6a:84:73:
         8f:2d:0e:6d:bc:b1:2a:01:67:60:c6:18:07:a4:9a:5d:7a:9c:
         b3:6d:ba:05:b3:5f:37:70:45:ef:33:00:0d:33:33:51:cd:dc:
         29:34:fa:e2:7b:35:28:de:14:93:32:b1:f5:b3:25:4f:71:e2:
         56:76:60:48:3d:0a:ce:90:09:a7:3c:33:dc:8c:35:87:cf:1a:
         cd:b4:2a:5c:8f:12:50:07:ad:38:03:2c:85:4d:59:df:07:8d:
         33:20:8c:c0:17:38:2b:ba:bc:7a:dc:cb:7e:e0:66:47:ec:e9:
         b7:94:0d:7a:7b:6d:a1:7a:e9:9b:e6:c0:3d:90:48:0b:e8:16:
         83:9c:ab:9d:b9:9d:0e:90:b0:4c:cd:f5:24:22:58:1e:b0:ed:
         ac:11:35:8c:3a:ce:a1:ec:ad:f5:c1:4b:cd:8c:e4:75:e4:bf:
         80:b7:38:0e:eb:f9:f2:07:66:e7:ca:1d:d9:4d:cf:88:00:c4:
         4c:88:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:00 2025 by rpki-client