Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f057c2b5-4f41-3497-a134-f85d4c4d31f3.roa
File:                     f057c2b5-4f41-3497-a134-f85d4c4d31f3.roa (raw, json)
Hash identifier:          YrMTamNrDa2NNbAJ49bSZ3irJeVBpLjbyK1Y02WKE2o=
Subject key identifier:   D7:D3:75:1F:56:1E:84:CB:0A:F5:9D:B5:5D:40:47:0F:CD:9C:8F:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C128B3C0E4F672152E4A2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f057c2b5-4f41-3497-a134-f85d4c4d31f3.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        69.246.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:8b:3c:0e:4f:67:21:52:e4:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5b04be49-c49e-4ea0-a710-c60631ce04c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:f3:6a:5b:17:31:01:e9:1a:ff:ab:d7:4d:
                    23:de:b1:87:d6:58:38:4d:86:11:60:3a:3c:7d:be:
                    e4:6d:6a:20:6b:b7:57:db:64:31:81:53:1e:c6:d5:
                    bd:24:ea:eb:5d:75:f2:df:7d:03:36:f2:af:39:dc:
                    37:cd:42:fb:2d:41:ea:06:df:6a:62:89:fd:1f:a0:
                    c9:a8:1a:53:1c:23:5e:31:09:1e:9b:81:a6:ef:0c:
                    f6:3f:d8:0e:e1:f7:50:99:c1:06:03:e4:24:ee:91:
                    b2:5e:28:b0:d8:fc:dd:19:d7:b9:86:20:0f:6e:6c:
                    a2:4d:56:70:aa:4c:ae:cf:f9:01:02:2b:72:9f:1f:
                    a9:5d:35:16:dd:50:80:b3:23:e4:5e:7c:e9:9b:58:
                    9f:dd:d9:16:6f:ce:15:6f:05:fc:74:75:5d:60:96:
                    41:c7:59:74:05:4e:95:e4:77:ee:7f:23:9f:7a:00:
                    08:bf:23:9c:0e:38:1e:6d:59:10:28:22:02:40:fc:
                    4a:23:c3:2b:fb:60:07:63:34:9a:be:ae:a6:95:7a:
                    94:ea:dc:13:e3:da:ca:ad:43:0b:b7:5d:2f:a4:b3:
                    8a:1e:7a:3c:f2:fd:60:e8:f1:15:53:83:8a:26:0a:
                    9c:e4:e5:64:e6:70:6a:b7:f8:61:66:52:4f:a7:ff:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D3:75:1F:56:1E:84:CB:0A:F5:9D:B5:5D:40:47:0F:CD:9C:8F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f057c2b5-4f41-3497-a134-f85d4c4d31f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:50:22:96:33:b3:42:f9:b8:b4:62:d7:7e:0f:b2:49:ef:59:
         5f:3f:cf:6d:52:1a:2d:a4:a9:09:3a:1b:63:64:69:69:96:06:
         29:e9:e6:91:80:06:9a:21:54:35:34:40:c5:3d:2d:79:cc:de:
         cc:a3:5b:2c:b3:38:b1:c6:a5:25:29:ef:ad:08:0d:26:d3:b0:
         ac:c8:31:e3:89:5b:28:c6:3a:a5:95:ab:eb:08:13:d0:92:ff:
         5b:e1:9a:66:5c:ba:e7:53:cd:14:ed:bf:99:df:b0:ec:50:0a:
         d0:d8:13:de:41:e7:45:22:80:34:71:5d:78:cb:21:d6:d4:25:
         e9:cd:00:4e:88:26:b5:e6:59:e1:2f:ee:63:66:73:c7:f0:86:
         e2:cb:a6:89:86:0f:d2:7b:e2:12:2d:b3:2d:40:ce:83:a6:de:
         26:b8:28:f9:ca:63:ad:88:b9:c9:e8:3b:43:e1:60:04:c5:3b:
         de:59:a6:48:74:32:a7:4f:4d:a0:f1:0e:5a:5d:ab:61:d9:26:
         2c:56:cb:36:68:e8:28:77:e9:7b:06:ce:38:bc:6a:b4:e1:55:
         75:36:72:ea:39:04:2c:92:18:42:db:f8:d9:ac:18:d3:a3:9a:
         82:0c:bb:ac:f7:8a:72:c9:96:14:18:fa:43:09:f0:95:06:76:
         b9:d0:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:17 2025 by rpki-client