Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
File:                     f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa (raw, json)
Hash identifier:          4WjGhFSszPZU6bTGTV/FL4cXzhUnsXId94eiyvUOasI=
Subject key identifier:   B9:20:2D:52:08:1C:B7:FC:D4:17:E8:43:3A:AE:78:F4:D5:D0:E7:AD
Certificate issuer:       /CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Certificate serial:       010D0C9F43285848037B679848136D4B65B77A80
Authority key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        69.59.224.0/19 maxlen: 24
                          74.116.144.0/21 maxlen: 24
                          216.115.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:67:98:48:13:6d:4b:65:b7:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=8629b575-aaec-4589-a140-f9451bc0dae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:ba:07:fb:a6:a0:12:41:4c:7d:a2:db:b4:
                    a6:fb:03:c7:9f:8d:32:ae:ad:90:0b:e9:5f:1b:02:
                    7c:72:74:37:64:73:06:61:2b:f7:22:33:60:75:2d:
                    67:c6:8d:e8:71:13:96:7b:74:79:14:9e:d2:65:ab:
                    fe:e3:e6:97:5e:c4:b8:71:d7:8c:cb:4f:73:59:14:
                    cf:0c:29:cb:dd:8b:3d:a8:9a:9c:86:b4:a0:13:ac:
                    5f:b1:f4:3e:e6:8f:84:8c:b6:1b:48:05:80:4a:73:
                    66:0c:ad:da:f8:a7:40:82:a9:45:04:57:4d:6d:f3:
                    f5:a1:cf:7a:0d:1a:20:0d:ab:e5:ca:83:99:85:44:
                    18:4d:d2:ac:cb:d5:d9:da:3e:dd:65:fe:93:4f:2c:
                    19:dd:32:22:7f:72:af:3a:11:36:6b:61:b5:c3:64:
                    d1:bc:01:8f:fd:3f:34:14:56:e6:37:24:2d:ce:3c:
                    be:a2:81:99:d9:59:39:59:2b:ee:da:de:ee:b7:f0:
                    00:34:ef:8e:a7:b2:73:b8:1f:e2:80:61:9c:e5:f8:
                    e9:f9:24:8b:7e:f3:08:74:b6:b4:d6:ca:9d:9e:68:
                    68:ca:c8:ac:81:90:d7:ef:5b:d9:e2:5f:8c:c0:f8:
                    53:27:e3:c5:c1:cd:ff:26:a5:33:2a:ba:5e:70:11:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:2D:52:08:1C:B7:FC:D4:17:E8:43:3A:AE:78:F4:D5:D0:E7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.224.0/19
                  74.116.144.0/21
                  216.115.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:25:26:36:b4:a0:32:b7:34:fb:f6:ae:20:c6:a1:0f:39:
         1e:7f:4e:e4:06:14:fd:73:7e:43:a0:30:71:cf:97:14:e5:17:
         4a:37:ab:80:34:df:f1:ce:31:e7:e6:a8:c5:1d:67:0f:fd:c4:
         05:fd:16:db:72:61:71:7a:f9:6b:e1:a1:59:a9:31:af:a2:87:
         88:ae:32:cc:c9:8a:2b:ab:59:df:2e:f9:f4:c1:4f:d0:cb:7e:
         b8:92:a4:a4:c1:31:f5:0e:50:7c:da:df:63:e8:a6:ed:68:bc:
         c1:b4:bf:ca:8d:7b:65:18:09:2e:53:1b:20:ef:03:85:3b:17:
         8e:0d:b7:be:68:91:0b:9d:41:b4:ee:d7:9a:29:e6:65:df:7a:
         5f:6b:a0:68:0c:fa:dc:1f:55:1a:5f:19:42:7d:84:5d:53:09:
         8e:98:da:06:0a:53:9b:df:26:ca:9c:f3:c0:ba:55:29:f0:10:
         dc:5a:7c:1a:f8:dc:3f:b2:28:4e:b5:dc:01:14:91:30:e3:4c:
         7f:41:03:32:19:a7:f9:0d:70:96:41:9a:30:d7:04:ad:61:62:
         cb:94:a8:61:70:47:a7:9b:65:fd:0f:1e:36:e9:78:89:49:b9:
         70:d5:89:66:b3:d4:73:fd:61:37:e8:69:9a:cb:88:71:5e:68:
         99:31:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:06 2025 by rpki-client