Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c8827ed6-dd4b-3021-9e90-6b23ae323a98.roa
File:                     c8827ed6-dd4b-3021-9e90-6b23ae323a98.roa (raw, json)
Hash identifier:          gGz43q5Y25FSmvTLrorsyum96BDb4doI/yyTTZmT6pQ=
Subject key identifier:   1F:BC:79:35:F0:65:3E:20:77:F2:BF:A1:84:0D:A8:40:22:7F:1D:83
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584824FA7E62B733DEEDFEB1F080
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c8827ed6-dd4b-3021-9e90-6b23ae323a98.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     14813
IP address blocks:        69.73.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:7e:62:b7:33:de:ed:fe:b1:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=5d15f89d-9ec9-489a-8277-0d03947a21dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:37:e9:7c:4f:c1:04:0a:18:1f:fd:5b:3e:
                    c3:3a:23:38:ad:30:a4:38:bb:30:5e:0f:bc:78:59:
                    af:ed:5d:12:45:73:4f:fe:ae:6b:15:40:49:e2:ef:
                    6d:f5:54:80:73:53:92:7c:11:c5:7d:08:b6:63:73:
                    59:96:07:de:c6:39:1e:e5:e2:88:c7:da:f9:d8:de:
                    38:af:39:8d:d2:3e:a6:93:59:f1:b1:73:27:b2:7d:
                    14:6f:d0:ae:c5:5d:4e:a9:02:71:7e:fc:2f:eb:f3:
                    fb:bd:6b:35:f0:e3:06:74:bc:ff:f3:a7:83:15:6f:
                    cc:cd:96:15:45:8a:47:b1:b8:9a:0e:6a:9d:ce:1a:
                    b6:13:d6:7f:5d:80:41:1a:86:d3:be:f2:11:d8:4d:
                    3b:89:ce:f4:23:c7:3f:a2:a9:2b:76:e7:82:a3:54:
                    02:3b:ad:c1:c0:12:e8:6d:c9:67:af:e6:cc:ae:6f:
                    fc:e4:ac:65:79:5c:a5:2e:a6:72:c6:1d:5e:37:eb:
                    fc:70:f4:4e:6a:fa:70:45:0e:29:b8:8d:e3:18:69:
                    3f:62:dc:f7:8b:ec:56:18:4e:3d:54:4d:6e:15:12:
                    bd:aa:37:dc:25:0f:75:ab:9b:4a:a5:67:08:29:a8:
                    b4:10:1d:db:9a:0a:33:82:d4:c2:e6:df:4e:bf:80:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:79:35:F0:65:3E:20:77:F2:BF:A1:84:0D:A8:40:22:7F:1D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c8827ed6-dd4b-3021-9e90-6b23ae323a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:31:7a:65:10:2f:6e:a4:33:af:40:d3:c0:8c:4b:b5:03:6f:
         20:a6:8a:61:dc:23:b3:07:57:07:17:53:a5:5c:c4:c2:3f:6e:
         e2:a6:53:47:2b:e3:68:9f:13:cf:7f:c1:9f:32:4f:71:6f:66:
         bd:95:6c:64:1b:93:02:13:4b:da:42:ce:aa:85:8c:84:b5:b1:
         a2:61:78:c7:37:a4:99:31:bd:77:93:3c:f4:b0:e6:77:04:0d:
         31:7a:b5:9d:10:5b:c8:03:77:02:1b:15:47:22:08:19:1a:78:
         83:b6:2e:21:3b:3f:19:c4:cd:7f:b6:61:b3:96:40:1c:c3:8c:
         0d:a4:61:f9:2b:95:c5:4c:61:94:88:5b:1c:d8:9f:bb:c0:3f:
         91:ff:9f:0e:cb:4b:30:13:03:6e:37:50:41:8c:58:ea:ec:8d:
         5b:61:81:84:5b:c4:ae:6c:26:74:de:24:a3:ac:3e:89:aa:bd:
         b2:85:2b:a0:22:5d:d4:1b:d3:8d:1c:16:62:12:12:d4:21:cb:
         9a:d8:54:cb:41:1a:55:34:c1:17:b8:05:9c:67:55:21:fb:a8:
         a1:84:57:be:71:a2:46:19:4c:66:37:f2:ad:85:b0:c6:8c:b7:
         cc:92:4a:10:08:69:e5:76:1e:c3:97:2b:9b:25:43:24:b8:60:
         67:ee:09:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:46 2025 by rpki-client