Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9ff154-125c-35fd-8377-6a3ddc74d24d.roa
File:                     2f9ff154-125c-35fd-8377-6a3ddc74d24d.roa (raw, json)
Hash identifier:          sQ/tghMoF3ugT7k5xgZm4C0X9oDKjQKVJ9gCNFmJQ5U=
Subject key identifier:   A3:9C:CC:EB:2B:47:01:69:D0:0F:17:F3:22:0E:26:D1:B5:82:A8:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10996A11D7EB1D08662900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9ff154-125c-35fd-8377-6a3ddc74d24d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        69.249.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:99:6a:11:d7:eb:1d:08:66:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=750da7a2-05b6-48a7-9a45-1c56e6da5dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:e4:40:40:5a:9a:88:9a:09:c2:13:2c:49:
                    ba:22:4f:94:9a:13:c5:e9:95:c1:6f:db:9f:53:62:
                    5a:a9:ba:88:46:10:ca:51:51:ac:d4:18:83:c0:02:
                    16:d7:f8:34:10:c5:69:6f:38:69:64:0c:68:af:11:
                    d7:ed:5b:f6:58:7c:22:1c:ad:78:e2:66:7b:a3:df:
                    82:de:b6:c6:40:33:43:39:77:73:9f:5b:06:69:87:
                    04:9d:bb:f9:13:bb:7e:0a:e2:0c:be:25:ac:82:5a:
                    59:3c:b8:b1:dd:87:bc:49:4f:cb:25:f7:e4:4b:66:
                    f8:86:a5:5e:03:ad:2d:eb:f1:35:0f:be:5d:ff:d7:
                    dc:f5:ac:8c:48:fc:15:98:7c:4b:42:78:18:76:ef:
                    43:b3:4c:4f:b8:58:cd:da:d9:a0:87:b8:36:bc:31:
                    5b:a1:6d:87:e8:c2:42:1d:06:3c:f4:bd:7e:91:e9:
                    96:43:f4:d8:25:c5:31:e3:d4:88:82:fd:ec:04:7f:
                    61:f3:b2:01:c1:f3:af:c3:d7:14:b4:2d:c4:c8:2d:
                    5c:d5:14:c9:64:ea:54:7a:93:0a:4c:cc:7c:95:54:
                    00:84:fc:d9:66:4c:ba:78:e9:f9:ff:fe:41:2a:ac:
                    5b:d1:27:9b:5f:b5:e1:53:c0:ee:74:97:53:f2:5d:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9C:CC:EB:2B:47:01:69:D0:0F:17:F3:22:0E:26:D1:B5:82:A8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9ff154-125c-35fd-8377-6a3ddc74d24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ff:e1:78:1d:9b:20:9a:57:c1:50:c9:9e:25:5c:16:ef:0a:
         2b:8f:19:1c:5b:49:8f:ea:50:79:30:27:0b:0e:7a:f3:27:8c:
         a6:a8:3a:29:be:59:58:65:e9:cc:7f:73:9c:83:ec:e1:36:83:
         e6:33:58:ef:08:02:31:9d:61:50:e4:41:5a:08:6e:10:a5:14:
         38:6e:ae:42:0d:99:54:eb:02:93:b0:b3:47:47:1c:5f:96:3b:
         b4:3c:22:8a:ce:9c:dd:63:ab:36:fd:15:fb:37:4a:e9:96:bc:
         87:55:f6:81:42:49:45:47:ff:70:34:0b:53:eb:cd:81:30:a8:
         28:70:38:9c:f3:5b:c7:bb:18:47:ef:36:74:f8:f2:27:ce:9e:
         8e:88:ea:63:a1:47:d2:4b:d4:b0:60:df:48:67:b6:b8:94:60:
         af:5c:6a:f0:33:d0:93:ae:55:85:f5:d5:47:00:bd:39:df:d1:
         5b:01:d9:a6:64:d1:bf:98:51:86:97:34:8c:3b:42:cb:a7:9d:
         a4:19:7f:ac:48:6c:34:49:79:05:9f:6c:30:d3:24:c4:0e:95:
         dd:f4:3c:e2:b9:dc:b8:72:cb:34:5c:f2:17:e8:09:db:32:99:
         92:eb:14:c1:ab:ef:6e:78:2e:a6:2b:fa:25:ce:83:98:14:4b:
         05:bc:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:08 2025 by rpki-client