Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
File:                     672a3d03-abc2-3f66-8052-26ed409619a3.roa (raw, json)
Hash identifier:          6FatHAHRwqmLL5gnt+6Cz7Oc7Wl77bJeWnOWgFFVEAo=
Subject key identifier:   B3:7C:53:59:A9:F7:DB:79:11:73:62:01:CD:51:CF:17:6E:E5:D9:C6
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858483F80277F7F29E6E6E2F9D2E0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        104.244.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:27:7f:7f:29:e6:e6:e2:f9:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=bbee5a02-a37e-42db-a01c-f5d10ae847fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:d1:fb:fe:bc:c1:a1:65:d1:60:88:66:3d:
                    85:29:3b:96:e2:b7:e8:22:a6:a3:5f:c7:2e:b4:ae:
                    11:d4:01:0c:90:75:ff:fa:b8:bb:50:6a:0c:f3:2c:
                    6a:54:46:38:03:15:a0:4b:e4:db:6e:8f:36:69:6b:
                    98:d1:4a:bb:9a:26:4e:8b:30:01:a8:55:77:d3:ba:
                    4a:5d:23:01:96:9c:5a:cd:40:73:42:85:f2:73:e1:
                    a5:d4:cb:82:06:dc:d7:d2:3d:ef:88:58:e3:ab:5a:
                    5c:f2:77:be:58:20:6c:e3:f8:0c:dc:8f:e1:c7:2a:
                    1b:30:0a:a9:49:b6:67:8a:65:e2:65:41:c4:76:62:
                    58:55:48:9b:c4:e2:06:2b:4b:b2:0f:09:8a:23:fe:
                    a7:27:56:cb:1b:8e:07:5b:ae:ba:e4:f9:d1:a5:32:
                    2f:75:9e:ac:4e:86:86:c8:84:b9:c8:6c:86:a1:d5:
                    db:41:06:c9:f0:08:e9:26:02:1e:77:bd:18:85:50:
                    fc:41:bf:08:1b:06:96:e8:fc:8c:2e:4a:6e:56:fd:
                    04:d3:22:41:66:92:77:1a:0a:55:33:ef:49:d2:37:
                    6d:74:4d:ca:0c:69:12:1b:2e:c6:98:58:f6:62:90:
                    3c:74:64:a6:59:59:7a:6c:49:75:b6:8c:12:19:6e:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7C:53:59:A9:F7:DB:79:11:73:62:01:CD:51:CF:17:6E:E5:D9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:26:09:05:a8:09:0b:66:57:2f:64:3a:35:0a:55:69:be:
         8e:43:ca:cc:0b:74:e5:f4:76:cc:8b:b7:c2:21:b5:a9:44:62:
         e9:1b:df:28:a5:de:ec:98:9f:18:65:eb:e5:79:4b:62:f4:db:
         26:79:25:d4:d5:76:96:35:c9:06:3f:b2:71:4c:d2:e9:5e:77:
         84:5f:1a:2d:2c:ed:2a:d9:91:c1:42:3c:9c:07:c8:d1:34:40:
         74:9c:80:55:c5:6a:5f:e7:09:4a:a4:72:fd:2d:63:01:87:32:
         81:f4:6f:94:db:f4:89:1f:b5:93:c8:ed:f0:98:fc:3a:c7:37:
         3f:4c:bd:1e:fc:69:df:7c:17:1b:f5:56:32:ae:09:1c:da:8c:
         49:56:24:7c:77:0f:62:5b:e8:6b:cb:2e:0f:c5:3b:a8:83:91:
         72:c0:3e:93:31:c5:b4:b2:3b:b2:a9:5b:77:90:b5:7a:6d:c2:
         8d:7e:f6:49:8c:1e:e3:ed:dd:e6:70:4a:a7:e5:59:c5:67:fa:
         72:91:67:ea:f2:7d:73:3c:07:75:e5:d0:a7:c4:d9:f2:03:99:
         5b:a5:ea:f3:52:61:86:07:70:40:e2:c9:05:82:7d:4f:ea:c6:
         d1:72:87:18:82:60:cb:5f:f6:17:b0:6d:5e:bf:82:5f:f2:59:
         d2:7b:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:34 2025 by rpki-client