Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/2fe27cba-451a-37df-9711-02ed680a4e1c.roa
File:                     2fe27cba-451a-37df-9711-02ed680a4e1c.roa (raw, json)
Hash identifier:          xkkAhpUiKR/+3J8LKYClEdRfcqgLjpSqiBVjxTd/kDI=
Subject key identifier:   A6:E6:28:DA:16:1C:5D:82:8C:A5:7F:43:47:5D:95:95:79:3E:EB:7C
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F432858482F9F24FB4D01E806DA774700
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/2fe27cba-451a-37df-9711-02ed680a4e1c.roa
Signing time:             Thu 12 Dec 2024 21:30:32 +0000
ROA not before:           Thu 12 Dec 2024 21:30:32 +0000
ROA not after:            Wed 12 Mar 2025 20:30:32 +0000
asID:                     394772
IP address blocks:        199.241.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2f:9f:24:fb:4d:01:e8:06:da:77:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Dec 12 21:30:32 2024 GMT
            Not After : Mar 12 20:30:32 2025 GMT
        Subject: CN=590311dc-2079-40a7-bc3a-a7a57248caa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:26:f8:33:6d:9a:f6:29:c4:62:00:46:96:
                    45:1b:d0:f8:ea:95:c6:9c:67:46:d7:b6:ee:80:46:
                    e8:b9:86:63:55:84:f2:9a:f0:d0:aa:bc:4b:ea:f2:
                    1a:6b:40:1d:e5:82:a8:d3:a0:19:bf:ee:28:43:3b:
                    a3:3a:1d:5e:55:7a:24:81:9a:cc:aa:74:bd:d1:c2:
                    4b:d1:19:28:4b:54:d4:73:42:99:28:d3:29:54:14:
                    dd:a5:d0:d4:fd:19:2e:c6:85:91:a1:cd:2d:b2:6e:
                    95:e1:9d:62:00:5e:8d:2e:5c:dc:15:04:a9:8f:5d:
                    40:2c:de:43:3b:e2:a6:fa:20:3b:45:59:ef:db:cd:
                    08:4e:3d:c5:54:dd:31:99:63:94:5d:b8:29:90:4a:
                    b9:b6:0c:d0:7a:b8:1e:d0:8a:ad:d8:56:17:2a:ac:
                    4f:cf:18:ae:dd:7d:43:6f:38:6c:a0:58:c6:f2:50:
                    b7:a6:fd:bd:fb:13:33:15:d3:d8:73:2b:92:7e:a0:
                    c6:dd:91:8b:48:bc:6f:65:6c:66:1a:0b:f2:d4:59:
                    77:81:fc:91:d8:96:40:e3:81:d6:c1:db:b1:9b:7f:
                    70:74:cc:fd:af:e3:25:16:37:5a:ad:44:39:52:00:
                    b2:e5:d5:0c:f3:b4:f0:f5:8c:96:d7:33:e3:66:12:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:28:DA:16:1C:5D:82:8C:A5:7F:43:47:5D:95:95:79:3E:EB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/2fe27cba-451a-37df-9711-02ed680a4e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:17:b9:de:2e:d0:9a:04:16:b0:60:53:5a:36:2b:7b:ca:
         0b:72:9e:28:d5:cf:64:30:17:ad:79:f4:a6:4d:b8:28:a4:e5:
         33:75:8e:49:07:8f:af:a3:07:29:18:72:8b:9d:26:56:94:cb:
         e9:cf:70:48:ca:62:7d:72:54:c9:6a:1e:33:76:4a:1d:af:32:
         0f:e9:5b:a7:d4:3d:7a:ac:1e:07:87:c2:f5:7d:36:e3:77:0a:
         1a:f4:6a:d2:16:86:75:e5:54:12:67:85:26:05:53:13:24:8a:
         7c:04:56:64:e3:83:81:b4:8f:16:f6:92:87:fa:2a:60:ba:9f:
         8a:36:96:d2:46:94:cd:12:13:1c:e2:3c:d1:eb:9e:5c:e7:fd:
         fb:a2:51:7e:20:67:f5:04:9a:38:3d:ee:d5:70:e6:4d:07:82:
         89:3c:c2:4c:8f:60:ba:92:a5:8a:c8:d6:65:9d:a3:3f:1a:0b:
         ae:a6:6c:86:f9:42:a1:b0:2c:b3:d4:77:1f:b8:a6:72:b9:22:
         c0:1a:e5:0f:f5:ec:d2:b0:28:4d:e5:5d:98:99:86:57:81:9e:
         b1:a1:7c:31:a0:5e:50:df:f6:83:f3:f7:ef:0c:f1:27:fa:6a:
         20:12:5d:cc:da:1e:f4:47:e9:67:69:65:c0:d5:9f:58:42:d1:
         07:ac:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:22 2025 by rpki-client