Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/bf6c51e0-03aa-30c4-8f55-9c9bf3ea4bbb.roa
File:                     bf6c51e0-03aa-30c4-8f55-9c9bf3ea4bbb.roa (raw, json)
Hash identifier:          lFcPHkA4nu65CwVJn9QB1F3K1p6n4RxFV0dYq90s9u8=
Subject key identifier:   ED:DE:B9:71:A3:E7:D8:D8:55:C8:65:BD:AE:58:87:39:A1:42:54:B5
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABCE930754D9BD2F314C0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/bf6c51e0-03aa-30c4-8f55-9c9bf3ea4bbb.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     23059
IP address blocks:        69.164.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:e9:30:75:4d:9b:d2:f3:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=911813eb-80fa-46b4-831f-5aba36ef652e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:d7:71:49:6b:b6:d0:59:d7:90:16:95:9d:
                    38:4d:d1:fb:f2:25:d0:d6:73:a1:14:af:12:8b:c1:
                    fb:9f:28:f2:e9:65:c7:19:ae:01:4f:7f:47:8c:4c:
                    55:e1:2d:af:08:45:40:43:e3:d0:0d:9c:4f:9e:a8:
                    25:d4:b3:3f:8b:d8:b3:39:3b:2b:b1:8c:6c:9d:06:
                    9b:2d:86:dd:a9:61:8e:fc:0b:00:af:8c:4d:df:dc:
                    12:42:96:2c:21:a6:07:8c:22:fe:34:37:c9:ac:3f:
                    14:90:63:cd:22:23:03:00:ba:52:2d:5e:41:40:17:
                    fd:d6:ee:4c:35:51:a2:73:8a:63:09:c6:6e:23:da:
                    86:20:98:94:74:87:1b:e6:8b:c6:95:85:8d:67:56:
                    f9:a6:6f:d3:53:dc:d0:6d:91:a0:99:23:7a:f0:8b:
                    88:dc:c3:9e:a1:7a:5c:62:e0:77:c8:2c:4e:b2:6d:
                    94:8d:fb:ed:c1:33:a5:10:c9:ab:25:c3:fa:05:69:
                    2e:9d:fd:4b:3e:b0:39:19:fd:7b:ff:3f:97:ff:a4:
                    cc:09:89:7f:21:96:f1:11:12:99:d6:20:b2:ea:df:
                    61:c8:22:f9:7f:39:e0:42:3e:3a:5f:87:21:2c:82:
                    45:11:c5:75:78:4a:0f:1c:04:17:99:20:2d:44:24:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:B9:71:A3:E7:D8:D8:55:C8:65:BD:AE:58:87:39:A1:42:54:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/bf6c51e0-03aa-30c4-8f55-9c9bf3ea4bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:1a:4e:92:e0:38:4b:1a:33:04:54:49:93:4c:6d:ac:a1:
         fa:16:d7:18:be:fd:a4:f4:07:13:e5:92:3d:b9:0f:63:b5:da:
         5a:4a:dd:18:43:73:43:81:2b:6d:fc:24:9d:6b:5e:96:11:61:
         4f:3c:e3:62:b2:8e:6e:92:72:4d:8d:f0:c2:5a:f2:f3:4c:f9:
         5c:75:d2:6f:ad:0e:73:e0:af:ed:63:34:01:e6:25:90:e1:20:
         a3:05:ae:78:58:b8:96:01:35:ce:9e:12:2f:23:0b:2e:61:cd:
         0f:64:a0:ba:c8:f1:fc:05:68:b0:45:47:7e:86:64:ac:49:03:
         76:94:db:1e:53:6b:02:f9:d9:79:09:d6:78:b9:af:cc:68:9d:
         98:3d:0e:9f:05:22:74:13:32:52:2e:0e:f7:c4:da:43:9e:db:
         e3:df:f6:f0:e5:b0:49:ba:b1:f2:78:f8:8c:0e:db:42:6a:e9:
         13:62:28:83:4e:c0:ef:c8:ff:81:0d:6d:9d:99:4c:3d:9e:b9:
         ba:54:41:25:b4:d5:b0:ff:d0:4f:e9:b0:5a:d1:48:39:7f:83:
         5a:88:9e:19:54:17:14:f8:dc:0a:bd:65:f0:5b:36:fb:b9:52:
         3d:c5:b9:18:0f:4b:c7:a4:34:70:e6:27:25:b9:b0:23:23:2d:
         3f:3b:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:37:13 2025 by rpki-client