Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b439e6b1-9e6a-3f56-875c-7a988044abe3.roa
File:                     b439e6b1-9e6a-3f56-875c-7a988044abe3.roa (raw, json)
Hash identifier:          zODqQ7sURayKoJBiy94esibG22kXzZYqmeUd1CssYAs=
Subject key identifier:   A8:D3:64:FA:05:AB:CD:65:EB:63:E5:F6:25:B9:D0:12:43:E5:AF:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C128AF6B1EAEAB6C7B96280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b439e6b1-9e6a-3f56-875c-7a988044abe3.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        69.245.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:8a:f6:b1:ea:ea:b6:c7:b9:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c3de408a-822f-475f-8fbb-f9e7b266bc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:c0:3d:50:b6:2c:d2:cb:3c:29:5f:6a:02:
                    64:56:37:63:ea:65:71:04:3d:a9:ea:3d:de:c7:9c:
                    a7:60:9a:f4:f9:36:43:ce:e7:80:47:59:dc:2d:e9:
                    d8:6d:22:84:0c:4c:be:b1:e2:0e:9c:ab:67:0c:20:
                    c3:13:69:4b:d9:dd:37:42:9b:25:ec:30:d2:27:94:
                    0f:f0:3b:41:9c:e7:33:c1:c5:ad:e0:2a:4c:85:f0:
                    a8:3a:cb:40:58:4f:56:81:47:26:d0:e4:21:8a:24:
                    9a:9b:5c:9c:6d:6e:78:42:a8:16:a8:95:6d:dc:34:
                    39:53:36:8f:70:03:d1:24:9d:b5:fc:07:2d:f6:c5:
                    12:df:5a:95:ed:50:3e:97:29:13:e8:b7:a1:57:29:
                    45:a6:92:c5:c6:cc:86:af:0c:47:1e:c4:b8:9a:0d:
                    0c:da:95:8a:ca:14:1a:9f:0e:df:a0:67:3b:5d:ab:
                    d7:0b:e2:b2:48:1e:1f:67:60:0a:ab:fc:ed:47:19:
                    73:50:f0:f7:90:90:77:82:87:e7:ab:64:de:d6:70:
                    66:5b:11:a4:72:f5:f6:89:c7:98:b1:ff:b2:8a:69:
                    4c:b1:71:f6:4a:c9:32:ff:3a:9b:a2:6e:a3:c7:9d:
                    67:e0:c2:ea:3f:45:24:0d:67:a8:6f:d6:34:05:c2:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:64:FA:05:AB:CD:65:EB:63:E5:F6:25:B9:D0:12:43:E5:AF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b439e6b1-9e6a-3f56-875c-7a988044abe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.245.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:15:46:40:f7:bc:1c:25:91:09:78:76:c4:5f:ee:ed:11:09:
         f8:cb:75:14:fd:3d:13:6d:42:59:5d:71:f7:b0:5e:de:66:1e:
         17:74:d5:ff:40:b9:98:3f:6b:3e:0a:34:63:d8:fc:53:0f:74:
         72:b5:16:5e:ea:43:8a:a5:0d:ad:30:e3:9d:59:42:7e:f0:3a:
         5b:07:e6:e3:2d:21:fb:d1:27:7d:eb:49:1d:2f:e2:68:31:30:
         c7:53:8d:56:01:43:07:6e:eb:b8:7b:87:36:45:46:ba:35:e2:
         1d:3f:92:ca:60:1e:39:32:93:36:a8:c3:b2:d4:ad:36:ad:59:
         fc:10:54:c3:2d:48:d2:af:b0:e4:57:55:32:54:dc:5b:96:7f:
         24:61:ea:85:11:8a:0f:9b:8f:44:18:ab:5e:b3:14:63:d1:56:
         5e:f0:a8:e0:81:99:1e:84:70:2e:49:70:27:84:45:a5:57:37:
         e9:20:d4:9f:a4:40:93:c2:b3:03:5e:67:0d:95:2c:f6:53:21:
         58:9d:28:7a:c8:06:e8:1c:2b:c7:1c:d4:b0:7e:df:22:33:96:
         1d:3a:8a:c2:08:3f:45:35:0e:f0:13:a9:33:81:cf:bb:5d:73:
         2c:98:26:11:63:f3:31:9e:f3:00:cc:a6:e1:ad:50:53:a3:d5:
         82:68:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:11 2025 by rpki-client