Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f46c3ea-bd67-3673-937f-82078772a8f0.roa
File:                     0f46c3ea-bd67-3673-937f-82078772a8f0.roa (raw, json)
Hash identifier:          A7U4tRrrUWD6eSvjYpp+6GquyZwvG1TqadqkChX8Uck=
Subject key identifier:   EE:03:58:90:6C:64:23:24:69:83:87:1B:28:D6:2D:13:41:E2:45:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11F4B5E5C487A0E4D28C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f46c3ea-bd67-3673-937f-82078772a8f0.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        69.244.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:f4:b5:e5:c4:87:a0:e4:d2:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c1ce5eba-cdbf-4985-b278-df1380e2306e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:ec:9b:ea:0e:c6:79:43:41:81:a6:38:9a:
                    b9:24:d2:0a:9a:24:b6:51:20:fd:d6:59:cb:8c:99:
                    45:94:cf:f2:27:a1:3a:70:c0:01:aa:8c:72:52:a0:
                    10:f9:88:d8:9b:54:dc:54:a2:6d:0d:2f:d4:17:a5:
                    96:01:91:bf:35:cf:51:63:b3:28:a5:3e:64:e6:d0:
                    a5:63:7d:e0:9b:26:46:34:6e:39:dd:c4:c3:dd:cf:
                    2b:62:2a:42:9c:92:fa:f0:40:8f:3d:6f:bd:e3:63:
                    df:79:e0:37:00:91:3a:49:09:ef:76:0e:93:cd:f2:
                    01:f3:43:02:d5:8f:f0:e7:39:59:56:0b:e5:d9:73:
                    7d:8e:cf:d3:a9:1c:73:5b:7d:75:c4:8e:9f:99:e3:
                    6a:31:c0:08:38:ef:f6:f0:44:90:40:de:8e:4e:13:
                    20:7d:fa:1d:de:51:9b:b3:60:b1:bb:72:f8:e1:d7:
                    63:9e:31:b3:26:13:a0:5f:d4:32:36:0a:2c:02:ae:
                    42:61:d2:4a:c4:13:24:1a:25:77:e2:7c:28:8b:04:
                    5b:56:05:03:93:ff:48:3a:f7:8c:f4:78:17:b9:5c:
                    98:1d:5d:15:d1:25:b9:ab:d2:5a:32:be:08:81:ac:
                    26:2b:17:8f:71:28:b4:01:4a:6d:43:e5:b6:9d:a4:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:03:58:90:6C:64:23:24:69:83:87:1B:28:D6:2D:13:41:E2:45:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f46c3ea-bd67-3673-937f-82078772a8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.244.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:5d:10:04:b7:d3:09:ac:a5:e0:22:7f:3b:83:ce:63:e0:d6:
         d2:5c:f6:b0:8f:ce:c9:d1:1a:93:85:aa:20:b2:d0:b0:20:58:
         a1:f3:e4:93:ce:ca:81:ec:08:80:67:7a:4d:a8:e8:71:94:cf:
         d0:7e:7b:ad:28:0b:f2:9b:16:8e:3d:81:82:21:5a:2d:cf:02:
         62:61:3f:52:5c:c0:b3:e9:1d:85:dc:c5:94:70:07:ba:04:a7:
         8b:cd:62:81:9b:e4:a7:ae:bc:f2:1e:ad:08:4c:c8:fd:2f:15:
         6a:f1:54:c4:ac:ca:6d:30:74:15:1c:81:bd:40:23:db:5d:41:
         06:75:4a:8d:1a:07:cb:11:ad:57:47:0d:bf:b7:64:fa:98:a9:
         b2:c8:f9:5a:9a:44:57:75:4c:bd:9d:ba:a2:48:71:49:26:b6:
         1c:3d:04:10:c2:21:a1:0a:63:b8:e4:18:05:2b:e4:56:65:91:
         02:14:43:ad:fa:a0:69:e3:e5:a0:90:bc:c5:1b:ed:03:6c:46:
         3e:23:fb:0f:10:ad:dc:ce:97:bf:76:b8:b0:4b:fe:a7:8f:c4:
         89:20:53:f2:56:62:2d:5b:90:1a:b3:f8:f0:3e:d8:6b:da:8e:
         2e:75:7e:b8:24:f8:d5:26:fc:e2:0b:13:8e:0d:62:74:ca:d7:
         e4:b9:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:07 2025 by rpki-client