Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa
File:                     2333bb4d-aed0-3541-ac64-280756dc7070.roa (raw, json)
Hash identifier:          e9pIh0VV8ls5mXDVyf/ilFwM75K34nBbrg1RLvE5lKE=
Subject key identifier:   B3:53:74:D5:62:4F:26:1D:2B:5E:AF:19:47:6B:55:BF:E8:7D:3E:C4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5C2456110E885CB4FC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        199.228.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5c:24:56:11:0e:88:5c:b4:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=6ea3e94a-6e16-4581-8e1e-3a3226bb777b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:23:91:cf:b8:9b:21:ce:89:a5:9e:ff:a5:
                    ca:6a:1b:b7:c0:f1:78:19:23:61:30:ba:c8:85:b0:
                    b2:d4:85:f6:9b:03:94:17:3e:14:c1:78:c9:7a:3e:
                    6d:e5:b0:20:4b:6f:a9:b3:57:0c:c1:21:8e:f0:83:
                    fa:7f:09:85:d0:6b:b8:bf:a7:47:0b:0b:fd:e1:8c:
                    3c:56:84:37:87:1b:f2:4f:0a:46:78:de:74:2c:56:
                    b7:c8:7f:ef:1c:c9:9a:3e:d9:0e:a1:79:2c:4e:e9:
                    c5:be:3c:9e:66:73:05:af:d1:fb:8d:d8:21:c3:59:
                    27:97:7b:da:db:e3:46:fd:d3:91:2f:f3:15:74:cd:
                    8e:5d:5e:1c:d2:14:b9:1b:e8:64:cd:cf:dd:c2:44:
                    b1:c4:16:84:80:33:d4:f8:fa:1e:99:bf:d9:88:40:
                    3f:5e:b4:27:d1:06:05:95:52:bb:3e:b2:c4:7c:52:
                    25:82:47:c2:aa:47:50:22:a7:78:b0:8b:a0:c6:81:
                    39:17:0b:3e:7d:7e:1d:bc:eb:52:96:1e:a6:5e:76:
                    b7:91:cf:38:80:2d:35:b2:4a:2b:17:66:3f:95:4f:
                    a5:f3:3b:19:99:62:ec:8b:91:96:da:4e:af:8b:57:
                    ea:04:3d:a1:5a:df:65:6b:ff:66:c0:46:03:5f:1a:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:53:74:D5:62:4F:26:1D:2B:5E:AF:19:47:6B:55:BF:E8:7D:3E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:1f:7e:26:f3:6b:5e:11:b3:a9:40:19:49:d7:b1:70:dc:
         9b:3a:a2:7d:8b:1a:d3:af:47:a3:ae:02:0b:f9:25:b3:78:19:
         2d:a1:32:5b:32:1c:71:6c:39:ee:48:f7:b8:58:04:72:05:b6:
         e1:10:45:74:5f:21:3b:b0:dc:28:6c:e3:7c:e8:16:51:f8:33:
         b6:04:10:06:79:b7:04:af:0b:39:c5:9c:49:50:50:05:9d:7c:
         05:65:db:59:32:e3:a3:7c:1c:10:a5:f5:cf:ea:b9:d8:ce:14:
         07:2d:56:68:8a:ed:0c:87:82:96:4a:06:9a:71:77:9b:0a:4b:
         c0:06:c9:5f:2f:af:ca:d7:64:ef:5a:66:55:d4:14:1b:f9:a2:
         eb:ff:51:90:32:7b:5c:85:31:bc:69:72:af:cd:44:dc:53:08:
         4f:5c:57:92:75:17:c8:73:b5:20:f3:81:90:61:36:d1:12:ff:
         7d:32:66:bc:54:db:c7:ed:65:0a:7a:30:40:e2:3a:32:f8:e7:
         dc:fe:34:56:79:0d:c7:f6:61:5b:71:80:94:64:a2:d7:50:75:
         f9:eb:aa:3e:62:ed:54:04:39:60:ef:8a:e9:4f:79:a7:50:5a:
         2a:d0:10:0e:32:5b:ad:53:fd:cf:5a:3c:b2:fb:3d:e3:89:b3:
         13:a9:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:01:16 2025 by rpki-client