Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa
File:                     f5e4343a-32c9-335f-a560-175d14c2a3c8.roa (raw, json)
Hash identifier:          8TQ/oleLmaMW7/kbuWduE8q0D8ru0ShdBIy02rUZ/ak=
Subject key identifier:   E4:64:D3:DD:CF:8B:51:FD:73:CD:48:6E:D6:1D:87:56:FA:66:85:D8
Certificate issuer:       /CN=c186a276-9141-41da-babe-4559d2c6d734
Certificate serial:       010D0C9F4328584946D5690ABBC3B66925AF4CC0
Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa
Signing time:             Sat 22 Mar 2025 21:50:24 +0000
ROA not before:           Sat 22 Mar 2025 21:50:24 +0000
ROA not after:            Fri 20 Jun 2025 21:50:24 +0000
asID:                     401335
IP address blocks:        206.168.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:46:d5:69:0a:bb:c3:b6:69:25:af:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734
        Validity
            Not Before: Mar 22 21:50:24 2025 GMT
            Not After : Jun 20 21:50:24 2025 GMT
        Subject: CN=1b4ec139-61b4-4b1b-b943-d292dff57f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:93:43:13:96:21:65:84:12:32:20:9b:41:
                    d4:05:54:02:70:4a:90:53:3a:38:3e:0d:61:74:51:
                    42:d4:2e:c2:f5:49:03:1a:53:ba:fe:75:f3:de:f2:
                    c1:85:cb:41:b2:c3:e8:89:99:4b:51:b9:55:27:e9:
                    69:a2:44:e3:43:8e:87:63:50:c0:91:74:70:e3:64:
                    89:97:11:16:c1:b6:9b:b9:da:fc:77:92:cb:d1:7e:
                    dd:97:e4:b0:f6:48:ee:11:53:d1:93:e2:d3:68:6b:
                    57:02:fe:bf:24:b4:75:96:ca:af:17:4c:ac:fa:d4:
                    b1:fa:67:3c:b8:74:52:23:4a:32:0c:d8:6a:2f:96:
                    67:4b:52:3e:22:32:84:e2:0a:8b:da:ed:66:1a:7d:
                    a1:00:06:9f:b5:7f:2f:9a:24:c0:d6:e3:f6:73:b8:
                    34:49:6a:15:34:1c:b6:c6:c7:90:16:d7:33:da:13:
                    ec:b7:04:41:23:92:ec:ad:4f:22:64:02:3e:8d:19:
                    31:11:37:0b:b5:af:65:99:0b:49:68:16:a1:64:f8:
                    6b:dc:e5:76:14:a1:fb:a8:90:d3:65:3e:56:89:30:
                    6a:7c:0f:d7:1b:c1:47:67:38:8a:88:76:6d:53:fe:
                    e5:b1:19:db:ce:c6:2c:4f:31:eb:b2:d9:cc:cc:db:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:D3:DD:CF:8B:51:FD:73:CD:48:6E:D6:1D:87:56:FA:66:85:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl

            X509v3 Authority Key Identifier:
                keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:0b:71:f9:51:5a:de:ae:e2:c9:b6:98:c6:e3:eb:2a:55:
         70:02:2d:9a:91:1f:09:1a:3f:c3:d3:89:f9:60:be:50:83:69:
         60:c5:c0:0b:d7:fd:52:5f:a0:f6:31:12:2a:0a:67:34:19:02:
         92:75:4c:bb:28:11:71:c6:2f:c6:d8:65:15:01:f3:ed:37:cc:
         62:48:59:b8:a4:74:4e:5f:ce:11:25:c2:2f:a1:a1:4e:5c:e6:
         44:19:56:6e:e0:6e:e8:bb:3d:5b:31:af:4f:0a:4d:f0:48:69:
         87:6f:2c:aa:a2:57:c1:0b:4c:e0:43:3b:ab:b8:74:6e:fa:96:
         9e:ae:59:d7:27:53:ff:a7:e0:1e:cf:01:78:35:ea:82:0e:64:
         03:0e:58:ee:66:ac:f8:74:29:fa:da:a6:3e:39:cd:5e:1b:ff:
         bd:fa:fb:97:5a:c8:89:fb:a3:5c:7e:68:e8:88:76:85:a8:60:
         a0:0b:49:cf:7c:fa:fb:37:97:dc:14:15:23:0e:88:43:25:e8:
         18:65:1d:ff:d2:0d:d3:8e:aa:8f:57:41:f4:b9:ee:e5:0a:c9:
         e8:9e:cf:1b:01:93:fb:e0:1e:c3:a7:cd:99:ff:63:bd:97:3d:
         88:4f:d0:dc:f6:61:9f:98:38:4e:da:6f:bc:f1:01:1e:87:c1:
         7d:3f:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:54 2025 by rpki-client