Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa
File:                     b468f5d9-7a72-39a4-a972-97bfc3b63415.roa (raw, json)
Hash identifier:          T409RLiYAjAMpfLGAZlyQuCPmwrDIBaTjeRVUMBWy2I=
Subject key identifier:   0D:64:58:9E:6C:A0:F9:3A:40:2B:15:AE:A5:14:E0:FD:D6:8C:67:E7
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584875F0517A879ABE4C188B8560
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa
Signing time:             Tue 07 Jan 2025 02:00:39 +0000
ROA not before:           Tue 07 Jan 2025 02:00:39 +0000
ROA not after:            Mon 07 Apr 2025 01:00:39 +0000
asID:                     21949
IP address blocks:        192.69.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:f0:51:7a:87:9a:be:4c:18:8b:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jan  7 02:00:39 2025 GMT
            Not After : Apr  7 01:00:39 2025 GMT
        Subject: CN=b5fc2f46-d6df-443d-9039-d674984a9ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:73:ad:b3:25:ae:8b:a0:87:3b:2d:db:d9:
                    a7:a6:50:88:f6:35:1d:5e:e9:1c:7f:b7:86:a6:f6:
                    c4:1d:8b:0d:d8:9a:0e:84:8b:5c:80:41:17:6e:db:
                    4e:6a:ca:0c:c1:ec:de:60:c0:e5:7a:7b:6f:24:42:
                    b7:58:4f:36:95:90:55:cd:6e:82:20:81:94:a0:06:
                    10:1b:6f:96:2f:8d:15:29:b3:12:87:4f:04:16:8f:
                    e2:51:17:ec:4c:eb:98:54:e7:25:45:22:52:a5:86:
                    0d:58:77:b5:00:f1:ed:74:36:8f:62:64:4e:5a:62:
                    e6:9a:37:94:e6:4d:c1:32:42:94:8b:3d:f7:9a:58:
                    01:84:d9:92:67:b3:26:da:26:28:f5:5e:c3:10:6c:
                    6b:6e:18:f1:0a:d1:35:34:c3:92:97:3f:7e:b4:f3:
                    25:0d:d6:ef:ab:81:d8:d6:7f:68:40:96:1b:56:f7:
                    aa:80:5a:24:ea:37:22:7e:1d:d5:41:7e:e2:18:3b:
                    6b:d7:b4:cd:37:c8:32:ab:84:bd:88:ad:85:1e:80:
                    bf:b3:6d:d8:e7:1b:1e:8b:cc:c7:db:39:b1:35:1d:
                    d7:ea:88:9d:f8:8f:8f:5b:ab:94:b0:e0:d2:1e:50:
                    a9:8f:d6:65:de:81:f2:31:bc:c2:f8:19:c9:67:ee:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:64:58:9E:6C:A0:F9:3A:40:2B:15:AE:A5:14:E0:FD:D6:8C:67:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:27:63:22:48:b7:4e:51:9c:c2:d1:70:a8:1a:b5:e0:e0:
         b8:18:20:6f:51:2a:21:92:25:50:76:f4:a5:45:40:a0:68:31:
         85:e2:d4:10:09:78:b5:d1:4f:44:58:63:f2:40:fe:b2:78:90:
         1e:ec:5b:4d:9d:e0:f5:1e:fb:f1:f1:d7:1b:38:b7:9a:19:ba:
         dc:47:85:32:00:b9:9e:9c:eb:6f:e1:a1:7a:56:28:ec:cd:15:
         c2:3e:4b:78:4e:0e:e6:7f:8f:65:31:b5:45:93:3d:5f:a0:86:
         b8:59:05:d3:32:22:14:66:df:b4:35:4e:e3:7a:57:10:2b:e9:
         ad:7b:93:be:5a:26:84:4b:f5:67:36:9e:23:3b:a4:b0:2a:f4:
         b1:33:2f:2e:2d:54:6e:0e:01:45:c8:46:43:1c:68:9b:fd:7e:
         b0:42:17:31:fa:b4:07:19:ce:62:75:c9:54:72:fa:73:5c:ff:
         22:7a:29:b3:3b:44:e3:f3:58:8f:3e:bb:9b:9b:25:72:f7:04:
         2d:de:6f:72:ca:6d:62:f7:54:20:38:64:cb:1a:25:69:68:f5:
         23:e4:18:92:04:ff:dd:81:56:d1:41:55:5f:b7:16:d0:dc:c0:
         f8:ce:00:72:e1:1f:64:48:1e:ef:68:9a:ed:8a:28:b5:ae:a3:
         45:17:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:53 2025 by rpki-client