Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa
File:                     62d1f131-ea9f-3506-be42-82e2442a4039.roa (raw, json)
Hash identifier:          2Rg0vcDlb+0ZTyZsXIRwnMk7wokm70Mv2heJTCt1jWM=
Subject key identifier:   8B:6B:51:B6:E0:F4:2D:C2:95:C9:82:63:35:A7:72:F5:C9:DE:95:38
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847E35F73A426BB45EAC7325200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11404
IP address blocks:        69.1.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:73:a4:26:bb:45:ea:c7:32:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=409115c5-2fcc-4353-80c1-da9cdf3525dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:26:94:8a:19:48:9d:0e:bf:3d:f9:40:5a:
                    d9:6d:c5:b7:6f:df:ee:74:f6:7f:a6:54:5c:91:31:
                    75:dd:12:4b:b3:02:10:5a:f8:50:dc:6a:32:6f:ad:
                    7b:a2:e3:6c:be:9b:c1:91:cd:51:da:23:19:77:d9:
                    57:74:d6:6d:d7:25:6b:ed:94:a4:50:94:67:03:4a:
                    53:99:8f:43:2e:74:23:31:21:73:73:22:97:7c:ff:
                    36:3e:b6:44:98:02:96:65:b0:1b:17:e3:1c:f5:2f:
                    bb:3f:86:7f:b7:6d:5d:76:a4:bc:b9:5d:24:c3:a1:
                    33:cf:43:fb:be:11:0b:d0:9d:bb:b0:1c:fb:91:3c:
                    8a:ed:7f:f3:18:e1:df:c5:1c:aa:96:d0:71:9b:02:
                    fb:09:b1:77:95:a2:70:8d:b4:38:a3:34:dd:a0:89:
                    c8:26:7b:99:db:c0:f5:43:ad:c4:ac:af:ec:04:e2:
                    7f:80:93:da:40:3c:0e:eb:25:78:b4:64:5c:0c:24:
                    06:2a:28:6c:0b:58:21:be:33:33:3b:23:a5:ed:47:
                    af:85:67:40:10:69:87:2a:8c:5c:af:13:82:aa:af:
                    36:1e:ee:9a:9b:ea:29:8d:01:04:4a:38:85:77:56:
                    35:60:0d:df:02:78:43:1e:e0:46:a8:45:04:0b:b0:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:51:B6:E0:F4:2D:C2:95:C9:82:63:35:A7:72:F5:C9:DE:95:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:40:31:c1:9a:4b:6d:60:9b:bc:a5:8c:e5:68:e1:57:73:97:
         c4:59:a4:01:b0:e7:b6:a0:83:ed:a2:dd:53:a0:70:28:90:07:
         6a:c8:f1:62:95:ab:9a:b6:3b:52:e8:11:e8:2e:9d:ed:18:67:
         1f:3e:dd:1f:4f:be:4d:db:ea:3c:04:b5:8e:03:7d:47:05:4a:
         da:90:21:64:29:07:44:e3:41:68:f9:56:da:59:c7:81:4b:30:
         5a:fa:76:56:80:eb:ee:65:2f:9e:12:60:49:2c:d6:c9:a4:3f:
         f1:40:a3:0e:af:a8:ad:80:57:b8:73:68:7b:6a:7b:2d:01:f3:
         cb:a2:29:d1:94:72:96:90:6d:90:7d:8e:b0:73:79:26:99:20:
         59:c3:f3:db:93:de:08:2b:37:42:f8:e0:9d:72:5d:85:37:c7:
         0d:18:4a:b7:30:42:4d:ee:a4:87:7b:42:f3:00:6e:39:a8:c7:
         82:12:1c:58:a9:98:e3:b9:4d:98:38:1b:bf:ed:e2:f6:94:a4:
         76:f4:9c:e9:78:cd:5c:35:a4:66:c5:93:35:6d:5c:a5:58:53:
         c6:21:2b:ff:83:d0:52:94:ef:80:62:12:54:7b:30:1e:43:43:
         16:52:b6:9c:5f:79:33:46:c2:d4:b7:87:88:e5:a1:c9:ae:10:
         77:20:da:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3OkJrtF6scyUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
NDA5MTE1YzUtMmZjYy00MzUzLTgwYzEtZGE5Y2RmMzUyNWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcmlIoZSJ0Ovz35QFrZbcW3b9/udPZ/plRc
kTF13RJLswIQWvhQ3Goyb617ouNsvpvBkc1R2iMZd9lXdNZt1yVr7ZSkUJRnA0pT
mY9DLnQjMSFzcyKXfP82PrZEmAKWZbAbF+Mc9S+7P4Z/t21ddqS8uV0kw6Ezz0P7
vhEL0J27sBz7kTyK7X/zGOHfxRyqltBxmwL7CbF3laJwjbQ4ozTdoInIJnuZ28D1
Q63ErK/sBOJ/gJPaQDwO6yV4tGRcDCQGKihsC1ghvjMzOyOl7UevhWdAEGmHKoxc
rxOCqq82Hu6am+opjQEESjiFd1Y1YA3fAnhDHuBGqEUEC7As5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItrUbbg9C3ClcmCYzWncvXJ3pU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjJkMWYxMzEtZWE5Zi0z
NTA2LWJlNDItODJlMjQ0MmE0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRAMcGaS21gm7yljOVo4Vdzl8RZpAGw57agg+2i3VOgcCiQB2rI8WKV
q5q2O1LoEegune0YZx8+3R9Pvk3b6jwEtY4DfUcFStqQIWQpB0TjQWj5VtpZx4FL
MFr6dlaA6+5lL54SYEks1smkP/FAow6vqK2AV7hzaHtqey0B88uiKdGUcpaQbZB9
jrBzeSaZIFnD89uT3ggrN0L44J1yXYU3xw0YSrcwQk3upId7QvMAbjmox4ISHFip
mOO5TZg4G7/t4vaUpHb0nOl4zVw1pGbFkzVtXKVYU8YhK/+D0FKU74BiElR7MB5D
QxZStpxfeTNGwtS3h4jlocmuEHcg2oA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:30 2025 by rpki-client