Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
File:                     7f0af303-ef66-3494-9c38-8f672671fb76.roa (raw, json)
Hash identifier:          ejlJ15lI66QCU0+KDsDRnUa01PMVPdoSlGCvPd8rw7E=
Subject key identifier:   26:3A:62:48:4A:5F:AD:35:02:51:62:7D:32:DF:B2:6A:9B:5F:49:29
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584902EC096F14253021746E3BD0
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     22799
IP address blocks:        24.207.0.0/17 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:09:6f:14:25:30:21:74:6e:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=59e54a5e-ce68-471c-b7cd-7a4988a1bb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:46:28:4c:71:4d:49:2b:ce:0b:a1:91:f6:
                    e0:89:68:0b:f5:eb:61:75:17:3c:3d:bb:f3:bb:5a:
                    ed:c6:55:12:f8:91:19:f0:3d:b5:65:16:ad:fa:24:
                    c5:3b:24:12:48:e2:6a:4b:7f:5d:0a:9a:86:5b:94:
                    bc:4a:1c:e6:91:9e:bf:08:50:e1:e9:7e:c1:74:bc:
                    44:8c:89:63:be:da:98:75:b5:25:dd:ed:c5:66:4b:
                    05:8c:4f:fb:f0:db:f2:3f:4b:9d:10:3f:19:b6:0e:
                    a2:61:b7:0f:6d:54:42:56:e1:45:98:1a:a0:17:c3:
                    5b:7f:70:d5:a2:a8:a4:49:78:46:76:74:00:ac:2b:
                    07:b3:49:6d:9a:fd:29:ce:b6:f4:4b:00:8a:a0:e2:
                    e3:41:57:c9:9e:39:06:b9:c6:33:cf:24:bd:d0:93:
                    95:ec:07:44:ff:a8:34:1b:ee:22:90:45:3e:0e:c3:
                    17:8e:e5:bb:f0:6e:d6:94:f2:af:06:0c:df:ec:ab:
                    7f:87:0f:d1:20:1d:ec:4d:72:69:e8:87:a4:80:41:
                    fe:45:b5:e3:9f:c8:33:8f:73:f3:ef:d2:f2:64:a2:
                    98:61:e2:77:05:82:f2:47:1e:a0:5d:ae:bf:bc:df:
                    cf:32:19:24:69:2b:8c:8a:4b:c1:a6:a3:f3:8d:aa:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:62:48:4A:5F:AD:35:02:51:62:7D:32:DF:B2:6A:9B:5F:49:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:c9:3d:9f:4c:54:21:ff:e3:c6:1f:85:52:89:af:65:e4:
         88:c7:c1:e4:ec:46:77:14:0b:94:3e:ac:47:79:4a:6e:e1:46:
         16:91:a4:72:f9:19:bf:f5:f7:ec:2f:1d:b2:d1:f0:15:e1:38:
         8b:04:a5:1f:3e:99:4c:62:31:35:1b:24:89:ca:8e:e1:61:32:
         7e:8c:67:b9:94:da:1f:9a:1d:66:19:d7:61:80:40:52:52:e7:
         4f:13:56:d8:84:89:5c:f5:be:2d:2c:56:41:8e:fe:24:14:56:
         93:2d:6e:ea:26:26:b3:04:db:dd:83:71:6a:8e:d5:9f:0d:5b:
         fa:20:c5:af:0b:4c:50:6c:4b:c1:d5:35:22:08:fc:3e:5f:ce:
         39:c7:fd:aa:8e:c2:0d:c2:55:d2:87:e7:a0:0d:0f:01:0f:a5:
         b5:83:65:f4:82:0c:b0:72:2f:7f:b7:ad:f6:d0:2e:8b:33:79:
         e7:0b:92:21:05:c5:46:ad:25:96:11:73:97:6f:6e:ae:3a:c1:
         fa:b3:35:33:9b:eb:47:68:bf:00:62:75:f4:69:6f:26:de:16:
         d9:20:21:13:19:b9:f5:02:69:07:f0:3c:17:82:03:32:51:0d:
         5d:23:56:29:75:4b:13:48:27:1a:88:fc:83:d7:92:e0:e8:ae:
         3f:c1:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:47 2025 by rpki-client