Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa
File:                     f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json)
Hash identifier:          V6V7acZh6LIthaU5Q0PESyLoWFiU+sYyeUrtoLvnsJ0=
Subject key identifier:   B4:D6:80:12:56:6A:5E:F8:92:33:21:FD:02:9C:41:4B:FE:0F:69:A0
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584865303676A4CBB4C470BAADE0
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     62563
IP address blocks:        67.220.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:36:76:a4:cb:b4:c4:70:ba:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=52543ff7-471b-4526-8d14-e2002db33a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:3c:02:cb:ce:50:1c:34:77:29:08:81:4a:
                    b7:e5:d2:c9:67:0a:82:b5:60:7a:4f:86:af:60:11:
                    ca:02:24:5a:e0:51:51:06:48:4d:99:2a:06:e7:ed:
                    6b:da:67:1c:0f:65:80:65:2d:bc:2b:87:68:eb:53:
                    bd:b1:03:b6:71:b3:5b:86:2b:9f:81:2a:f1:ba:50:
                    a9:b4:32:89:08:ee:68:38:8f:9f:61:64:24:4f:d3:
                    24:cc:61:72:d3:5c:a6:54:26:56:fb:d6:14:05:b3:
                    a0:7b:fc:c7:6e:8b:98:d3:72:bb:69:ed:8a:9f:06:
                    ae:ff:df:b8:11:ae:f6:d9:8e:3b:10:9d:25:7b:22:
                    c2:b5:2a:6f:df:61:3c:88:6d:f4:cb:42:59:f1:af:
                    a9:34:fe:17:50:7a:59:2a:ae:18:16:10:0c:06:93:
                    83:e9:4c:43:ea:59:76:b5:a3:47:fb:ce:36:cc:dc:
                    d8:07:e7:da:10:18:3b:65:f3:b5:a6:04:d0:92:1f:
                    47:7a:68:11:71:25:47:5e:a0:3f:1f:1a:b5:c9:7c:
                    1b:72:00:82:9e:06:7a:d7:ac:2a:65:40:52:52:65:
                    c6:ab:e7:b9:6e:68:ef:28:92:02:43:e4:12:b8:fb:
                    e0:b1:8c:3e:35:ea:c1:f1:55:b6:27:dd:2c:8b:be:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D6:80:12:56:6A:5E:F8:92:33:21:FD:02:9C:41:4B:FE:0F:69:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:74:74:04:f8:00:5d:a6:d2:e1:3d:04:b1:3d:bf:1b:4f:65:
         03:21:f9:fd:0e:38:74:5d:42:a8:f5:6e:86:ea:63:eb:6c:93:
         d5:73:fe:17:9d:fc:ba:83:d8:ef:1e:c3:58:c1:8c:94:0e:da:
         91:e5:df:62:bb:9c:8c:b5:ae:da:e7:29:c3:63:6e:27:24:66:
         fd:a3:13:b0:b6:32:ae:10:66:68:d3:89:16:05:c1:c2:ca:7e:
         4c:4b:77:38:08:e4:23:8c:be:01:bd:74:34:0a:9f:34:36:a1:
         2c:bc:4e:ff:a3:cd:c3:3c:99:6d:13:0d:cb:15:82:67:0c:9d:
         e9:24:1c:ab:95:85:41:f2:a6:6c:a7:34:9b:1c:0d:24:93:59:
         40:53:28:09:e9:d4:91:2a:fb:48:a9:4a:00:43:07:43:a0:71:
         bd:92:41:14:dd:8e:dc:a3:e6:de:2b:1a:1e:65:fb:73:41:ff:
         c9:7a:fe:2c:f9:80:23:b6:02:c3:c4:ac:cf:c4:ae:d4:15:e3:
         1e:ed:33:6c:3a:fd:b4:9f:cd:41:9d:59:14:a2:db:09:de:27:
         f9:e1:8b:63:d1:94:d6:20:5b:2b:5c:48:51:21:cb:7c:51:cd:
         48:de:53:41:88:3b:51:52:7e:0f:af:07:a8:ba:c0:32:b7:f8:
         a9:2f:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:49 2025 by rpki-client