Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa
File:                     84370759-4ae0-3a58-8003-564fe29685a3.roa (raw, json)
Hash identifier:          5jILcz5mdX+DpW6ZVxwVTLskwVMAxvSy1PyRKgYjmQY=
Subject key identifier:   E3:55:1A:38:7E:0C:29:97:52:22:BE:7E:F8:3E:3B:86:88:AB:32:3D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB56EF2132A711E4761EA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        69.40.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:6e:f2:13:2a:71:1e:47:61:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=7e922da8-6090-4f2a-9f5a-0071c36d4b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:29:6c:ba:c8:5d:df:2b:37:92:30:cf:e4:
                    8f:0f:38:1f:3d:6e:1c:9a:32:76:26:f5:79:10:cb:
                    73:aa:b7:47:a3:18:9a:2f:d1:50:43:1d:13:6c:00:
                    5e:ff:a1:aa:0d:6a:1a:2a:a2:15:f3:35:64:aa:50:
                    7e:e9:89:4a:7d:2d:4a:78:17:66:16:d0:38:43:65:
                    2e:c6:7a:34:60:76:dc:02:8b:2b:2a:91:e6:88:e5:
                    66:8e:11:20:25:c8:dd:bb:8f:27:54:41:2b:d8:67:
                    f7:53:cf:e0:30:d4:f1:d8:9e:bc:c7:9a:ad:a3:69:
                    3b:fc:32:c2:9a:4b:27:5f:d2:b9:bc:fb:3c:35:a7:
                    34:37:1d:03:81:a8:a4:e7:3e:54:b3:68:d9:6d:c6:
                    af:4e:13:d9:5d:d9:c6:6e:b7:eb:48:84:b1:39:f9:
                    e1:67:74:7e:23:99:79:9b:2b:55:6b:56:19:d8:ad:
                    17:1b:36:d9:7a:7e:7f:86:a7:13:17:05:92:41:71:
                    f2:57:1e:ac:53:31:e3:8c:e0:f2:f6:6b:e9:d6:d6:
                    19:df:d9:d6:f4:fd:b1:10:60:48:4a:aa:b2:14:b2:
                    8f:02:44:9b:5b:96:9a:56:57:ee:1b:a0:53:ce:e0:
                    67:7a:9d:9e:a5:94:14:1e:8a:c7:b2:6f:57:bd:bf:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:1A:38:7E:0C:29:97:52:22:BE:7E:F8:3E:3B:86:88:AB:32:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:24:29:8b:85:a9:62:ef:58:27:f7:a6:15:d2:96:38:58:53:
         fb:90:c4:57:3b:b7:a4:dd:9b:80:f1:5c:ae:57:a0:5f:7a:a5:
         9d:38:f1:cb:64:34:f3:4a:66:97:0c:c1:42:37:25:5f:41:b0:
         83:e0:8d:35:20:fe:48:65:e6:82:41:3c:72:03:fc:41:24:8d:
         da:4d:49:57:aa:0a:20:a3:23:e8:9c:04:f9:44:bd:8b:3d:30:
         dd:05:65:e8:f9:6a:50:cb:ee:13:7b:9d:d9:68:a5:38:3e:6f:
         82:d7:7d:fa:fc:de:2b:24:2f:e8:eb:60:59:f8:93:b5:24:f7:
         52:e5:c3:38:be:ce:48:20:78:99:11:29:59:18:de:ee:08:d5:
         0b:05:e3:d1:54:4e:79:13:a1:4b:ad:eb:c6:00:c3:64:ee:26:
         d3:f4:43:56:9d:f8:23:4a:f6:54:99:2a:d5:d7:47:29:0f:de:
         fb:e1:4b:79:37:88:db:9a:7c:48:95:b6:17:85:05:4f:07:66:
         2b:63:08:eb:b9:88:5c:cf:f8:54:b9:eb:de:24:3f:07:e1:88:
         f8:62:eb:5f:7e:27:bd:45:31:87:c2:85:10:31:65:e2:fb:7a:
         25:be:48:5d:4a:f1:c4:41:8a:4d:a3:b9:d6:3c:91:c6:ed:f9:
         73:2f:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:20:59 2025 by rpki-client