Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d7dc922-6064-3cdf-9129-19838f827236.roa
File:                     4d7dc922-6064-3cdf-9129-19838f827236.roa (raw, json)
Hash identifier:          HaOsBlLPYhLsfi5qgxKomRGGei9VberAxdlFO72mwo8=
Subject key identifier:   1B:34:A7:C4:A3:06:9A:20:AC:D7:41:9F:30:53:A7:93:29:DF:D8:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F692F84D1532D98EB1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d7dc922-6064-3cdf-9129-19838f827236.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        69.244.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:69:2f:84:d1:53:2d:98:eb:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=bcbbb126-142c-440f-9986-9d14ff710da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:25:93:47:90:86:92:83:94:bb:9b:19:d2:
                    74:1d:82:79:6d:e7:52:f2:58:4e:ec:53:2e:e7:2e:
                    6e:be:77:dc:b9:c2:09:3b:c7:aa:4d:9a:4d:a5:a5:
                    61:00:41:42:17:b9:ed:0b:a1:a8:5e:2e:f6:0d:20:
                    cd:f4:83:b8:e5:55:81:f7:84:d2:ff:0f:72:da:7d:
                    40:9d:2f:62:b0:05:ac:16:70:78:cf:34:d8:c6:39:
                    68:2f:e5:5b:95:9c:e6:64:f2:68:85:15:5f:48:55:
                    d4:f6:3a:9e:cc:c2:e1:30:4d:1d:ec:92:00:bd:01:
                    2d:e2:46:37:b2:23:06:5c:82:fd:39:83:f1:5d:4b:
                    b0:c6:aa:fe:04:3e:b3:29:2a:27:95:e5:76:44:cd:
                    ff:13:7e:ff:09:92:30:a6:91:e6:0d:9b:24:46:d1:
                    00:2b:42:26:b4:93:1f:ea:52:77:81:bc:e2:51:4f:
                    ba:fa:df:7e:6d:7a:66:38:42:6e:bf:6f:4f:16:7d:
                    5c:3d:62:56:1c:e2:10:9d:b8:59:4b:85:83:8b:8f:
                    7c:be:dc:3a:1e:0b:7b:1a:60:a9:22:cb:67:3e:43:
                    05:77:d8:97:3b:67:86:86:df:68:a4:27:32:4e:43:
                    87:09:e1:91:a7:01:01:d9:47:e2:13:ef:03:1a:1d:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:A7:C4:A3:06:9A:20:AC:D7:41:9F:30:53:A7:93:29:DF:D8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d7dc922-6064-3cdf-9129-19838f827236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.244.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:80:1f:53:c0:29:ea:0c:9e:e2:18:3f:7a:27:2c:4e:35:
         e9:06:da:f9:35:38:07:e1:98:e8:9f:3f:a4:11:dd:ff:05:83:
         eb:3f:98:52:95:3c:2d:4b:dd:25:da:3e:46:f3:45:23:75:f5:
         33:f4:89:10:34:32:c2:5b:90:4b:d1:04:a2:24:79:0b:94:f7:
         ac:e6:26:d0:a0:5b:7e:89:49:a7:47:a6:5e:28:6a:ed:cd:3e:
         ce:e6:23:cb:64:dd:f4:57:29:26:b8:bc:77:46:8b:0c:d6:3c:
         8e:d5:78:51:08:c7:67:56:83:f6:96:dd:2a:8c:1f:82:2b:54:
         6a:96:0e:5d:1b:14:07:b9:83:e9:29:24:8f:50:e5:d4:45:18:
         cb:9b:20:09:e8:d0:73:45:52:2f:76:31:a1:55:ad:59:8e:33:
         b9:10:e6:fb:27:61:e1:9c:f7:9c:be:b9:02:eb:49:aa:d1:a9:
         ab:71:8f:85:ce:d3:e7:3b:09:88:ff:8c:4b:1b:ac:f1:eb:91:
         ca:78:ee:be:27:39:a3:df:d6:cd:35:1a:3e:21:d5:8f:db:be:
         f5:29:68:af:b8:0e:6b:96:23:d8:95:61:d8:47:7b:49:6d:a7:
         57:25:46:aa:75:93:db:2c:20:29:49:b1:ee:4b:02:9b:ca:77:
         dc:63:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:48 2025 by rpki-client