Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1919c3f2-988c-35b6-9cd4-45d79df4b650.roa
File:                     1919c3f2-988c-35b6-9cd4-45d79df4b650.roa (raw, json)
Hash identifier:          J9ryYSxNCpn5bSNrgFQ2qkSuQvGL1PtD9KT4efYP6Jc=
Subject key identifier:   9A:BC:2E:5E:25:0D:92:C6:70:3E:EB:6F:7B:0C:7A:39:D3:5F:49:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AC116A393389259577500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1919c3f2-988c-35b6-9cd4-45d79df4b650.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        174.169.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:c1:16:a3:93:38:92:59:57:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=de254838-1889-423a-bdc5-1836bf23cbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:d4:32:ef:a6:5a:00:de:1e:4a:7d:ea:ba:
                    e5:e6:d0:f9:eb:c2:74:85:8a:35:2d:b8:ce:4c:67:
                    6f:91:37:20:5a:bc:e5:a9:7c:06:94:f0:13:29:b7:
                    05:ad:91:04:94:c5:3c:ba:7d:9c:1d:37:3e:e7:1c:
                    51:c9:d9:43:bc:55:82:2f:63:0d:c9:4e:e6:0b:d8:
                    93:4b:ba:44:b4:48:f4:88:b7:e6:49:e1:44:5d:e1:
                    73:f1:43:9f:79:9c:b4:9f:ae:fe:b0:8a:98:07:dc:
                    c3:58:7b:f5:71:2d:a0:48:72:42:ba:0a:7a:48:41:
                    59:17:9f:52:6a:6b:10:6b:cf:e6:8a:48:ac:27:6a:
                    34:77:13:9e:26:7f:e4:c3:d3:4f:e0:1f:fd:2e:c3:
                    ff:05:87:0f:01:72:03:2a:34:5e:1f:66:68:4d:d3:
                    af:e7:0e:11:f9:a2:1d:c9:0f:a4:7e:05:b3:d1:7d:
                    18:c5:96:ed:ac:4a:c5:89:39:46:f3:84:b6:a8:55:
                    f1:b3:4a:77:cd:87:f8:bc:11:65:f1:03:f5:57:64:
                    08:4a:36:95:b7:4a:28:38:e6:a5:36:75:18:6c:db:
                    5c:d0:82:a2:0a:33:4b:80:27:f2:04:39:06:d9:60:
                    aa:90:ce:09:35:1a:84:32:64:2a:b4:b8:4f:2e:d5:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BC:2E:5E:25:0D:92:C6:70:3E:EB:6F:7B:0C:7A:39:D3:5F:49:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1919c3f2-988c-35b6-9cd4-45d79df4b650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.169.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:1f:c4:b0:2a:c7:d1:27:8b:59:a3:07:c2:bf:3d:69:4c:
         3b:7b:9e:ed:be:33:c3:10:ba:13:01:46:71:84:d3:e7:ba:9c:
         e5:70:c5:28:45:65:d9:6d:cf:24:7d:8b:d1:e5:94:83:d5:47:
         38:42:35:1b:c2:61:d6:0f:6c:88:97:35:37:04:2e:c4:b6:10:
         aa:a9:d3:48:0f:97:85:30:95:69:3e:f3:bb:fe:21:a2:5e:74:
         8f:bd:90:94:5c:18:b1:9b:67:0a:7a:6e:4e:58:21:c0:0b:e2:
         00:7d:90:22:6f:4d:4f:54:24:5f:4c:ea:be:a4:5c:6b:60:3b:
         fd:49:e9:bb:ff:51:4e:dc:3d:cc:cc:11:63:53:43:28:1b:7f:
         f4:97:76:2e:61:af:5f:3b:ab:18:1d:da:6c:19:51:ee:58:01:
         1a:d5:3b:d9:a9:55:0a:49:ba:f6:8b:68:a2:79:20:c2:28:dd:
         19:92:82:0f:3f:5c:8e:e3:28:c5:95:45:18:5f:af:15:48:87:
         8a:12:6f:13:90:3d:79:0b:8a:c2:6d:b9:2b:cb:91:fd:08:88:
         1d:0b:ec:f5:2b:94:4a:5a:9e:55:d0:95:9d:37:a4:fe:bc:27:
         9f:13:71:f0:2f:6c:e7:99:37:be:5b:54:e7:13:e1:1e:0a:26:
         ee:20:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:02:00 2025 by rpki-client