Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
File:                     7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa (raw, json)
Hash identifier:          sn0PCfpxJp6z98a+t0h7arTbJQwrXhvMXWkvTGKYttw=
Subject key identifier:   0B:B5:87:22:0C:B5:48:29:D9:EF:CC:67:99:BE:D3:B3:F7:65:20:7A
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F43285848EC9692D2F44955AE328BE9F0
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     62728
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:92:d2:f4:49:55:ae:32:8b:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=659bdb41-53d7-48dc-8d29-0366902d41e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:74:b4:a2:c3:7d:62:4b:eb:9b:c0:f7:10:
                    10:3f:e6:a2:01:f1:66:eb:59:a2:d8:fc:f9:a7:4d:
                    09:8a:e2:86:ac:55:e7:0a:5e:98:9a:bb:50:a0:d3:
                    f1:94:46:25:d3:aa:73:d7:97:32:21:86:59:32:8e:
                    41:0f:8d:52:21:f4:2c:0d:b4:cd:c6:08:f7:62:bc:
                    1b:bd:9a:3b:7f:70:ff:82:42:97:cb:18:ca:d2:99:
                    2c:05:a0:5a:f0:75:11:c0:f5:fa:bb:d5:e2:16:2c:
                    fe:1a:98:00:3c:b3:ba:e1:ed:cf:d0:fa:2b:8e:0a:
                    73:68:37:10:95:47:0b:cc:af:fc:52:68:b4:58:bf:
                    11:38:1a:b6:44:80:8d:73:b3:ee:63:5f:cc:0a:09:
                    ec:58:f5:cc:9a:3b:d3:46:f4:aa:51:68:95:df:a1:
                    b2:6e:e8:46:0b:6a:bb:58:0d:cc:4e:74:4a:5f:7a:
                    ce:f5:bf:a7:6a:c4:c4:3a:cc:6e:00:94:52:fb:6b:
                    6f:71:58:31:4e:9a:fe:21:f1:bc:3f:97:53:0b:76:
                    e9:08:73:be:c0:66:07:ea:0c:d1:b6:82:40:9d:e7:
                    07:9d:4d:00:d0:60:0c:bf:2f:91:87:fc:e4:c5:3b:
                    a2:83:62:af:fb:2a:19:96:12:61:4b:21:d7:84:12:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:87:22:0C:B5:48:29:D9:EF:CC:67:99:BE:D3:B3:F7:65:20:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:02:e2:1c:e8:4d:36:0e:0d:ff:15:50:95:ee:33:b6:9d:
         ff:f5:d9:27:11:7c:4c:00:7b:5e:1f:29:db:b5:97:79:b2:aa:
         1a:e1:52:db:1c:71:85:ee:1f:6a:25:3a:b4:9b:62:d3:89:65:
         d5:55:10:eb:d6:ba:24:93:17:63:20:bc:78:45:e6:fc:39:68:
         b4:dc:17:e9:41:06:78:7a:40:ff:f1:14:7e:97:5f:98:f0:0e:
         5b:eb:c5:dd:dc:6d:d7:88:61:0e:de:70:3e:25:d5:c5:61:85:
         3a:7e:b9:ef:4a:f1:7f:b5:aa:43:2c:51:88:a2:80:a2:35:af:
         c5:17:02:09:1b:84:ac:24:6b:30:ad:61:08:49:36:a4:1c:da:
         31:e4:09:37:9c:be:f3:54:a3:e5:eb:d0:7e:ac:2f:45:ca:b7:
         bc:e1:f6:d1:a7:42:37:ea:a3:d5:be:c2:e3:56:60:6a:83:2a:
         21:ab:b1:e5:c2:32:0a:c3:15:59:c4:82:df:7b:86:21:0b:07:
         80:65:2b:a8:13:c8:58:5c:56:63:44:81:e0:dc:b1:57:f7:7c:
         4d:51:9d:38:d7:e4:6c:5f:b5:3a:fa:ef:cd:5a:39:08:da:79:
         05:97:29:68:0c:6f:b8:61:17:b2:48:7b:63:ab:3d:c2:69:3b:
         04:4b:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:49 2025 by rpki-client