Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/6f5591e0-afb2-345e-bba3-630a1f6b1f48.roa
File:                     6f5591e0-afb2-345e-bba3-630a1f6b1f48.roa (raw, json)
Hash identifier:          5hkDbEkv8hPooYQWhpsfi/M17nH3M6Ry4czVzgfYLnQ=
Subject key identifier:   8A:9E:4E:38:18:43:60:83:53:02:77:FF:C9:83:74:8A:78:E7:1C:FA
Certificate issuer:       /CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Certificate serial:       010D0C9F43285848037B624A4A12FE6C02502872
Authority key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/6f5591e0-afb2-345e-bba3-630a1f6b1f48.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        69.59.224.0/19 maxlen: 24
                          74.116.144.0/21 maxlen: 24
                          216.115.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:62:4a:4a:12:fe:6c:02:50:28:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a92ab952-d24b-4786-b6be-4aa054eb9c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:e8:5c:99:04:c8:f4:97:56:14:2f:3c:2a:
                    3b:48:40:b6:33:63:7b:d7:92:f8:55:48:7c:c1:bc:
                    05:37:88:13:a1:5c:10:67:b7:c5:3a:97:96:55:ef:
                    d1:8e:21:50:e7:5e:ee:a0:2c:87:2c:19:f3:a1:ee:
                    30:73:f5:53:98:5b:da:d9:56:02:b3:8d:af:bb:d2:
                    f2:c7:c2:1d:ae:12:04:05:c3:65:ec:be:1b:16:08:
                    41:f9:a0:ba:9b:c0:b7:29:42:fe:c0:87:9d:49:ce:
                    46:1d:77:de:89:47:83:7d:2e:1f:6e:fa:6e:a0:ce:
                    0f:b7:28:86:e8:61:30:23:37:e0:a9:6e:73:e7:89:
                    f1:af:ab:c4:d4:8b:09:5c:ec:cb:70:3f:9e:8c:6f:
                    db:ca:a1:4f:50:1f:66:ef:29:2d:79:cf:5d:c2:53:
                    a6:b1:44:6c:e2:ca:e1:a7:a9:9b:5c:e9:e9:cc:d3:
                    74:5d:86:d8:d2:13:69:39:e0:72:3c:0b:49:c5:09:
                    ec:01:91:25:04:42:9d:b3:42:49:23:c8:c8:fd:53:
                    5d:a9:0c:07:2e:bc:28:ce:69:10:40:8e:f7:96:fd:
                    29:7a:9d:5f:5a:6d:f9:38:4c:1a:c8:26:a4:fe:d6:
                    8f:47:db:e1:d0:6d:b2:06:78:0a:1b:08:7d:09:df:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9E:4E:38:18:43:60:83:53:02:77:FF:C9:83:74:8A:78:E7:1C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/6f5591e0-afb2-345e-bba3-630a1f6b1f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.224.0/19
                  74.116.144.0/21
                  216.115.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:d4:29:6f:e3:a2:d8:69:9a:26:52:39:d3:5c:03:81:24:
         00:a9:ce:85:98:bf:b9:c8:c1:7b:0f:f9:6c:75:ba:e7:10:d9:
         aa:08:72:9d:d1:8e:8e:26:08:e0:dc:ef:a0:3e:46:7c:54:69:
         1f:75:c5:66:84:e7:2d:19:06:59:54:eb:07:47:b9:91:6b:a3:
         1f:8b:21:13:a8:79:49:96:ab:82:93:fb:52:1d:33:20:97:22:
         77:3b:6c:5a:ec:c5:e2:78:ce:ec:a1:ad:24:eb:5c:e4:3b:95:
         09:d1:3f:f9:8b:c1:bc:b8:6f:d2:9c:b9:12:2c:2a:3c:41:0c:
         c7:5c:c7:c8:8e:83:ee:91:cb:51:1c:48:90:f7:10:6d:1c:b5:
         16:19:3d:cd:aa:eb:58:84:fc:b6:c2:06:be:e6:cc:83:5e:53:
         7b:66:f8:c8:e6:1b:47:6c:29:10:6c:15:ae:c2:16:8c:2d:33:
         45:86:aa:10:72:c8:9e:a6:bc:ff:52:9f:70:3c:d4:25:cb:44:
         1c:8d:36:c4:3d:6c:88:a5:2c:07:ab:94:55:c7:41:d7:10:cb:
         b8:6f:ff:f7:bd:e8:8b:75:d7:70:2f:94:60:0f:55:7a:7d:14:
         c8:e4:2e:fc:e1:0c:5b:f7:99:a2:e3:15:b2:30:ee:5d:60:10:
         31:5d:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:58 2025 by rpki-client