Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa
File:                     6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa (raw, json)
Hash identifier:          Z5ljHx+SudfU8ZyIgOi3aXQsKBr3p01wXl372ubW+T4=
Subject key identifier:   50:0D:2E:89:FA:8B:C1:04:6F:9D:D6:64:25:5F:77:B9:8E:FF:DB:78
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C58186249BA6360F67C72900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        216.58.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:86:24:9b:a6:36:0f:67:c7:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=700019b8-fa6c-4ba9-8aed-e9d2dacaa8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:89:93:aa:7e:e7:d3:6f:04:5e:4b:ca:df:
                    e6:7c:c4:fb:26:a3:8e:3d:5e:15:ed:59:ef:1c:d4:
                    ed:2f:78:9d:61:24:31:c0:c1:35:04:25:18:41:b5:
                    f9:33:3e:c3:58:9b:b1:8f:01:8a:66:5c:60:01:2c:
                    49:04:48:5a:7a:e0:f7:a2:20:27:1c:d8:e0:8f:6c:
                    ab:b1:8e:59:ef:2e:6d:d7:94:29:b3:b6:42:89:31:
                    63:af:45:d9:32:a6:7c:48:05:e8:88:73:b7:3f:24:
                    49:1b:56:db:e6:02:0f:87:ab:02:1e:97:4b:62:fc:
                    76:9e:6e:9e:e7:50:7f:4a:65:7f:72:d2:a4:80:b2:
                    49:16:b4:a8:28:42:78:1f:44:55:48:5a:cf:f9:2a:
                    8f:c2:35:96:38:64:84:fd:e6:d1:0a:fb:40:56:72:
                    7e:5e:2d:ea:76:9b:bf:3f:08:e9:b0:4e:d3:53:bd:
                    fb:d7:ce:04:74:70:bf:6c:fe:db:62:b6:05:a7:65:
                    ba:37:8e:b1:d4:f5:c8:a7:49:c0:bf:45:10:ee:67:
                    3d:a3:73:42:de:37:08:10:a8:f6:6a:ff:48:0d:01:
                    73:50:2a:66:b6:b4:39:3d:03:f9:0b:f3:51:6b:b5:
                    fb:e5:e2:73:05:87:e9:93:8e:41:6d:56:b1:4a:a3:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:2E:89:FA:8B:C1:04:6F:9D:D6:64:25:5F:77:B9:8E:FF:DB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:fd:f9:29:c4:8f:b0:57:9e:37:41:c5:ad:a5:0a:4c:f4:
         bf:18:2e:70:86:b7:a4:95:20:55:fd:71:8c:f8:6e:14:2c:3f:
         11:4f:6d:8c:30:e0:b6:06:a1:b0:85:83:d0:e6:70:23:a3:f8:
         94:bf:0d:f9:62:e7:43:a7:7d:c0:a1:86:75:44:94:53:fb:db:
         1f:a6:10:88:58:2c:76:af:e2:28:74:19:fa:fa:77:ea:6f:63:
         ee:78:20:9e:5c:f0:6e:6d:5f:5c:5c:63:d3:70:7c:27:04:20:
         dc:b6:dc:03:6b:b2:88:7d:6c:70:b4:8f:9a:3f:e4:55:4f:8e:
         8b:fc:10:06:9d:d4:20:f5:e9:89:43:8b:9e:1b:04:65:3c:ad:
         42:af:d5:aa:6a:e2:1e:76:f7:14:a3:23:0b:51:74:2b:e2:40:
         fc:cd:5d:a3:9b:0d:c4:da:69:a6:3b:88:d8:48:04:4a:0e:fb:
         5a:d3:a4:e0:2d:4e:b6:65:ac:29:aa:48:70:64:db:27:b1:ae:
         3f:19:65:02:64:f2:5a:a0:76:56:3a:64:b7:be:bb:45:f4:c3:
         6a:dc:a9:cf:44:75:ef:d7:24:30:5f:15:30:9c:3b:03:7c:c6:
         38:89:e7:5e:20:23:49:40:53:af:5f:4b:ba:2c:1e:fd:0e:1f:
         cd:07:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:36:00 2025 by rpki-client