Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa
File:                     95774164-cb15-3162-b6d9-0bac014ef78d.roa (raw, json)
Hash identifier:          aEl8Ax1SqiCzComwnrgielYOHSiIC4l06CNHKwzgqCs=
Subject key identifier:   CA:6D:6E:6E:9B:D1:51:FD:47:5B:9B:95:21:9F:BC:A1:AD:7E:BC:1C
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849002154AC8BED03E1F2B3D480
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     16815
IP address blocks:        216.219.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:54:ac:8b:ed:03:e1:f2:b3:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=7140bd82-88a9-46d1-b01f-d08c9090190f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:9a:3e:67:15:14:f7:30:d7:db:03:83:07:
                    0e:f9:6c:e9:c0:f5:c8:a5:1e:1c:c3:21:3c:55:9d:
                    70:ef:c2:72:cb:b1:1b:e3:f6:92:cc:1a:86:35:32:
                    64:91:11:b2:83:ca:55:9e:fd:87:90:2c:cf:fc:ad:
                    bc:b5:1b:0f:ba:a6:17:c5:5b:09:5f:df:c0:a5:84:
                    49:52:34:b6:4a:9f:7f:ab:dd:70:2d:d0:1f:25:e2:
                    15:f9:3b:af:4c:35:23:03:8e:46:67:45:f9:ed:d1:
                    07:93:d7:3f:23:82:01:1a:2b:59:8a:a3:39:b6:49:
                    e5:d0:80:5f:7b:7e:68:2d:86:77:cf:e7:a5:b4:01:
                    1d:84:00:95:86:b8:f4:10:72:d3:db:84:84:63:00:
                    01:16:fb:23:7b:67:6d:92:d1:36:95:c7:80:a4:50:
                    b9:59:05:bd:93:4f:77:04:06:2c:19:17:92:dd:81:
                    5b:e1:c0:af:da:de:e9:b6:a9:03:d1:cc:33:1a:f3:
                    ac:7c:dd:78:3a:1e:1c:2a:49:88:5a:2f:b0:51:70:
                    db:cf:82:d2:64:d4:48:05:03:97:f3:71:30:d3:a2:
                    1a:72:72:e8:25:25:3c:23:a6:79:09:48:af:c1:09:
                    e5:3e:b6:42:1b:78:2a:70:94:f4:06:6f:4a:1c:50:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:6E:6E:9B:D1:51:FD:47:5B:9B:95:21:9F:BC:A1:AD:7E:BC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:06:e9:3c:5b:5c:92:8c:bf:fd:93:52:1f:a3:24:00:58:52:
         7f:00:68:bd:24:d5:50:44:05:11:82:67:0a:bf:8b:03:ae:2a:
         6d:ca:a7:26:ea:cc:b2:d1:83:fe:44:ed:df:4b:73:0d:08:b2:
         64:15:d2:24:45:63:79:30:d0:03:dc:f4:f8:d5:71:ff:43:9e:
         38:ae:c9:33:5b:de:ae:09:ab:5f:4b:3c:0c:4d:c8:61:d0:98:
         2e:7e:f0:bc:49:22:9d:d7:0a:33:0c:76:6e:b8:48:12:1f:4d:
         f4:11:00:4d:05:9e:59:fb:c7:95:3d:10:98:57:5b:e3:d2:20:
         ea:16:38:2c:3d:a9:c3:1e:e1:11:08:4b:32:e6:b9:71:d2:bc:
         77:0c:11:9f:95:29:94:97:5f:50:7f:c2:dc:e9:98:e8:fb:78:
         37:7d:16:78:23:f5:e8:66:fb:62:88:7b:e8:e6:8e:ef:de:9f:
         98:7b:16:e8:a3:d0:da:e7:97:44:15:95:f6:71:ae:28:66:e6:
         47:ca:45:0d:3d:cf:02:0a:38:b7:55:47:c0:7e:38:7b:fb:a0:
         af:e4:77:8f:03:81:b8:af:47:e4:28:90:0f:b8:62:9d:e5:19:
         e2:d5:1b:c9:2a:2d:a9:d2:f6:05:d3:5b:86:b6:f3:1d:34:0d:
         fd:c0:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:54 2025 by rpki-client