Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa
File:                     26200898-e5dd-3b01-9c4d-596463f56496.roa (raw, json)
Hash identifier:          C8OOQuNXIR7d6WmQ3g4O1CiItqm04X4uKrhjAGvnrU4=
Subject key identifier:   C4:A1:00:42:CE:2F:72:2A:5C:60:64:41:82:89:F8:BA:84:0E:7F:66
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848143B4D80D2E1580200CA2F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7029
IP address blocks:        69.66.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:4d:80:d2:e1:58:02:00:ca:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ea5d4663-7072-4c4c-aca1-d332449cf9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:22:a0:d3:07:d9:db:c1:eb:f1:8a:5b:a5:
                    bb:ad:5e:a6:05:56:82:df:46:a6:a3:b2:f1:ca:4e:
                    9c:1d:46:75:a2:c4:19:67:c7:be:fc:4f:da:8c:ad:
                    49:91:3e:6e:49:4d:95:87:63:3e:ce:31:67:ce:c1:
                    30:27:5d:84:39:5a:03:76:5c:18:36:4e:ee:04:b0:
                    c2:74:25:dc:3c:28:d8:d4:ff:c3:68:40:fe:23:5f:
                    c1:e2:60:a1:e7:1c:db:be:2b:ae:0d:6b:93:83:49:
                    a2:2b:bc:ea:5b:60:88:6a:92:66:1a:2f:f2:db:3c:
                    e8:68:13:6a:5e:25:0a:df:8f:0c:b2:06:75:42:af:
                    74:88:6e:81:75:37:96:ec:91:70:e8:aa:22:1e:f2:
                    6c:8c:82:05:23:a3:b3:db:ed:26:2d:55:0d:b5:a5:
                    8d:93:19:71:21:70:77:53:5f:9b:ca:fa:02:15:91:
                    93:76:e3:c4:c5:be:43:4c:69:b5:f7:64:b0:f3:8c:
                    5c:42:1d:50:0d:19:8e:2c:04:50:2c:11:9c:41:46:
                    a7:63:8a:66:c1:5a:1e:a9:1d:8c:b9:17:74:47:4b:
                    9e:b6:d7:2c:2c:da:e9:db:f7:06:dc:a3:15:79:90:
                    22:1a:21:58:ec:da:86:f8:d7:5f:97:5d:f6:9a:46:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A1:00:42:CE:2F:72:2A:5C:60:64:41:82:89:F8:BA:84:0E:7F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:ca:55:42:11:ff:8a:28:90:bb:6a:a9:ff:5d:0e:54:43:
         24:38:5c:27:99:e8:ae:14:6a:f9:d1:6f:c8:59:d3:9b:a4:17:
         ee:63:d8:95:e8:50:87:b7:67:bc:5e:fa:01:1c:37:45:00:28:
         51:7f:bc:d7:c2:46:61:1f:77:21:b6:ed:f1:55:4c:aa:f7:f4:
         f9:bd:ab:e0:f1:17:7e:dd:df:03:85:74:e5:41:b1:48:d4:d1:
         30:41:de:bd:31:32:35:67:6d:b5:05:f0:dc:2b:be:55:01:67:
         45:cc:ce:4d:c2:a8:6e:ba:d8:18:90:4e:69:3d:c8:ce:19:9e:
         46:5d:14:30:15:d9:a4:8e:48:4e:69:b0:0a:11:af:de:f5:ed:
         db:57:b8:0b:60:67:01:49:bb:0d:c5:d5:dc:ec:c2:53:99:db:
         3f:57:e1:13:69:5d:ce:52:ab:53:25:db:b6:e2:8c:97:a4:d4:
         4b:50:52:48:18:65:16:b5:e2:5c:dc:50:2b:aa:36:bc:9b:24:
         7e:22:1c:30:e3:77:b7:65:e6:73:09:cf:d2:36:b1:72:32:93:
         07:7f:3c:47:81:5f:06:c9:8d:43:af:57:94:78:c4:a7:5f:46:
         5a:cd:ea:49:d6:6d:e7:52:f8:8e:82:54:5a:58:c8:61:81:dc:
         89:0d:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:43:56 2025 by rpki-client